A project partner I've been collaborating with for a long time sent a document update yesterday and needed me to download a file. My first instinct was almost to blurt out "Scammer?" 🤣

I really didn't dare click casually—I'm too afraid of running into phishing files sent from hacked accounts.
Later, after careful verification, it really was the person themselves. The project team was also very responsive and immediately switched to another method. I also explained the reason to them.
By the way, I'd like to sincerely remind everyone: no matter who sends you a file, don't download or open it lightly. Always verify the sender's identity multiple times. Security always comes first!
I also recommend project teams not use file downloads to share information!