A computing device receives instructions, from a user, to send an email message and determines if the email message includes an attachment. When the email message does not include an attachment, the computing device conducts a scan of text of the email message for implications that an attachment should be included. When the email message includes an attachment, the computing device conducts a scan of the email text for implications of a particular type of attachment. The computing device provides, to the user, a notification when there is a positive result from the scan of the email text for implications that an attachment should be included or from the scan of the email text for implications of a particular type of attachment.