Unexpected attachments are the classic malware delivery vehicle, riding on curiosity and routine. Pausing to verify any attachment you weren't expecting — through a separate channel — defuses the payload before it detonates.
“Didn't expect the file? Don't open the file.”