Secure Attachment Policy

With Zoho Mail being a secure email service, the attachments in the emails you Send/ Receive in Zoho Mail are subject to the Secure Attachment Policy. The Secure Attachment Policy intends to protect users from malicious files and attachments. Certain attachments containing executable/ program files may have destructive programs or malicious functions which perform phishing/ spamming/ malicious activities in the users' system, and may even misuse the users' identity. Hence to avoid such security threats, emails with certain file attachments are blocked in Zoho Mail. 

Attachment types that are blocked

The attachment types that are blocked by this policy include the following

File types blocked to be sent or received in Zoho Mail
File extension typeFile type full form
.adeAccess Database Engine Project
.adpAccess Data Project
.apkAndroid Package Kit
.appxApplication Package
.appxbundleApplication Package Bundle
.batBatch File
.cabCabinet File
.chmCompiled HTML Help
.cmdCommand Script
.comCommand File
.cplControl Panel Extension
.dllDynamic Link Library
.dmgDisk Image
.exeExecutable File
.htaHTML Application
.insInternet Settings / Installer Script
.isoISO Disk Image
.ispInternet Service Provider Settings
.jarJava Archive
.jsJavaScript File
.jseEncoded JavaScript
.lnkLink File
.mdeAccess MDE File
.mscMicrosoft Management Console
.msiMicrosoft Installer Package
.msixMicrosoft Installer (Modern)
.msixbundleMSIX Bundle
.mspMicrosoft Patch
.mstMicrosoft Transform
.nshNSIS Script Header
.pifProgram Information File
.ps1PowerShell Script
.scrScreen Saver
.sctScriptlet File
.shbShell Scrap Object
.sysSystem File
.vbVisual Basic Source File
.vbeEncoded Visual Basic Script
.vbsVisual Basic Script
.vxdVirtual Device Driver
.wscWindows Script Component
.wsfWindows Script File
.wshWindows Script Host Settings
.terminalTerminal Profile
.cerCertificate File
.urlInternet Shortcut
.mhtmlMIME HTML
.aspxActive Server Pages Extended
.crtCertificate File
.plgPlugin File
.mdbMicrosoft Database
.appApplication Bundle
.imgDisk Image
.prgProgram File
.mcfManaged Code File
.basBasic Source File
.aspActive Server Pages
.regRegistry File
.pstPersonal Storage Table
.plPerl Script
.applicationClickOnce Application
.jnlpJava Network Launch Protocol
.derDistinguished Encoding Rules
.pyoPython Optimized Object
.infSetup Information File
.matMATLAB Data File
.opsOffice Profile Settings
.osdOperating System Deployment
.cntHelp Contents File
.pycPython Compiled File
.cdxmlChemDraw XML
.shsShell Scrap Object
.cshC Shell Script
.mshMonad Shell Script
.library-msWindows Library Definition
.themeWindows Theme File
.prfOutlook Profile File
.mdzAccess Wizard Template
.bgiBorland Graphics Interface
.wsWindows Script
.grpProgram Group File
.appref-msApplication Reference
.elfExecutable and linkable formats

The emails with these attachments will not be Sent/ Received via Zoho Mail and will be bounced back. This also holds true if these file types are placed in a zip file. That is, even if one file among the many in a zip archive contains any of the above-mentioned file types, it will not be sent/received via Zoho Mail.

So if you try to attach any one of these file types in an email, you will receive error messages while attaching the file and the email will not be sent to your recipient(s) and will remain in your outbox.
Attachment error    

Blocked attachment

Similarly, you also won't be receiving these file types as attachments in your inbox in Zoho Mail either.

In case you are sure that it is a trusted attachment, you can use Zoho WorkDrive or similar services, to upload the files and share them as links in your emails.

Anti-Virus Scanning:

An anti-virus scanner automatically scans all the incoming emails and processes them to bounce any email with malicious attachments or files. The emails with files that are found to have virus attachments will be bounced back and will not be relayed to the user, even if the email is from trusted contacts. 

Still can't find what you're looking for?

Write to us: support@zohomail.com