You can't trust everything that comes into your inbox, even if it looks or sounds like it came from a friend or family member. That's because scammers and crooks use a technique called social engineering to try and trick you into trusting the sender and falling right into their trap.
I've mentioned social engineering before. It's just a fancy term security experts and hackers use to mean "tricking people to get information." It could be a phone call to an office manager "confirming" an order for over-priced printer toner, or a fake tracking notice for an online order that tricks you into entering your user name and password.
I just received a phishing email on my work account that's a perfect example of how scammers use social engineering to attempt to fool folks into doing something the scammer wants you to do. The email was sent by someone claiming to be a woman named Mary Anderson and regretting that I didn't attend her recent wedding. But, according to the scammer, I'm in luck because the sender is kind enough to share her wedding photos with me.
The very unwelcome email then provides a link to download a few photos from the wedding. That seems harmless enough, but it's anything but.