I think he should not download the attachment because the what the email said might be correct BUT maybe the attachment is about something bad. John also should not purchase the product first before he searched for its information to see whether it is the same.
&still trying to find a happy ending