Firstly, I'm not really one to be paranoid about links/emails, more that I think I'm savvy enough to be able to spot dodgy ones iyswim.
But I very, very nearly ignored/deleted this email this morning. Granted, I'd just woken up but it just seems a bit of an oversight when everyone is aware of being vigilant about spam and important emails like this might get missed.
It's to do with my ADHD referral, and somewhere in the letter it basically says/implies that because they emailed, they wouldn't be posting a letter. Fair enough, costs and all that, except if I'd missed/disregarded the email...
IDK, I just think there's a fair bit you could do to make it less suspicious looking. I don't particularly want to download random attachments from a possibly spoofed nhs email address which are password protected. And while you may say 'oh it's fine, the password is your DOB' - it's quite easy from a tech perspective to set up any answer as the 'right' answer to a password protected file, giving the illusion of protection iyswim.
I could probably write a bit of code myself that said as long as the password was 8 digits, no letters, characters etc, then accept it.
The email also says the attachment can't be scanned for malware. Again, I know it's legit but that could put a lot of people off.
Just wondered what others think? I might be way off. Maybe I just need another coffee!