Using Power Automate to save email attachments - safe from phishing?

Question

At my job, I frequently receive many invoices that I need to attach to expense reports, so I created a Power Automate flow that saves all attachments from emails that A) Come from specific email addresses from which I frequently receive invoices AND B) Have the word "Invoice" in the subject line. The attachments are saved to a folder in my Business OneDrive and it's very handy.

But my question is, is this a potential security risk? If one of the email addresses were to be hacked and send me a fake invoice attachment, wouldn't it automatically download the malicious file? Is this something that Microsoft has addressed? Are there any anti-phishing "checks" I can add to my Power Automate flow to make it safer? Thanks in advance!

Answer 1

Hi Boltwood, Audrey,

Thank you for reaching out to us on the Microsoft Q&A forum.

This topic is not currently supported within the Q&A forums. We recommend starting a new discussion in the Microsoft Power Automate Community, where moderators and community members are available to provide guidance and assistance.

If the information is helpful, please Accept Answer & Upvote so that it would be helpful to other community members.