Yes, Google Drive checks files for malware and phishing on its own, and it warns you before you download something suspicious. The catch is that files over 100 MB and some file types can’t be scanned at all.
In this tutorial, I’ll explain how Google’s checks work, why you can’t scan Google Drive for viruses on demand, what the scan skips, and the simple habits that cover the gaps.
How Google’s virus checks work in Drive and Gmail
There’s no switch to turn on. Google scans files in the background, and when a file looks suspicious, you’ll see a warning when you try to download it. Google’s advice for that warning is short: use caution if you download the file anyway.
If you use a work or school account, Google goes further. Files shared with you from outside your organization are checked for phishing and malware, and Google blocks your access if it finds a problem.
Gmail does the same for attachments you send and receive. You can see it on any attachment, right next to the file count. That’s handy when you save an email attachment to Google Drive, since the file was already checked.
When Gmail finds a known virus in an incoming email, it rejects the message. If it finds one in an attachment already in your inbox, you won’t be able to download that attachment.
What gets scanned and what gets skipped
Here’s how the checks line up, based on Google’s help pages:
| File or situation | What Google does |
|---|---|
| Drive file under 100 MB | Scanned for malware; suspicious files show a warning when you download |
| Drive file over 100 MB | Not scanned; you may get a message that the scan failed |
| Some file types | Can’t be scanned, whatever the size |
| Password-protected attachment | Encrypted, so Gmail can’t scan it for viruses |
| File shared from outside your work or school | Checked for phishing and malware, blocked if detected |
| File Drive strongly suspects is spam | Blocked or moved to the Spam folder |
Big videos and backups are the files most likely to go unscanned. If you regularly upload large files to Google Drive, scan them on your computer first.
Limits of Drive’s virus scan
- There’s no manual scan. Google’s help doesn’t describe any button or setting to scan your whole Drive on demand. The checks happen automatically or not at all.
- Large files go unchecked. The 100 MB limit applies no matter who uploaded the file.
- A clean scan isn’t a guarantee. It catches known threats. It won’t tell you whether a stranger’s file or link is a scam, which is why I wrote about whether a Google Drive link can be dangerous.
You’ll see Drive Marketplace apps that promise to scan your files. They need access to your Drive files to work, so I don’t use them and don’t recommend them.
A warning also isn’t the same as a failed download. If nothing downloads at all, my guide for when you cannot download files from Google Drive covers the usual causes.
How Drive keeps unwanted shares out of your way
Drive has a Spam folder that works a lot like Gmail’s. Files Drive strongly suspects are unwanted land there automatically, and you can move shared files there yourself.
To report a file someone shared with you, right-click it in Shared with me and choose Block or report > Report. Google reviews reported files for policy violations, and you can block the sender in the same step so they can’t share with you again.
I’ve covered the full cleanup in my posts on how to stop getting spam on Google Drive and remove shared files from Google Drive.
Habits that cover the gaps
- Check who shared it. A file I wasn’t expecting, from a name I don’t know, goes straight to Spam.
- Read any warning. If Drive says it couldn’t scan the file or flags it as suspicious, I only continue when I know and trust the sender.
- Scan it locally. I download it and let my computer’s antivirus check it before opening it.
I keep my antivirus on all the time, and I use Chrome’s Safe Browsing, which alerts you about malware and unsafe sites.
When I’m the one sending files, I share with specific people instead of a public link, so they know exactly who it came from. Restricted is the default in the General access menu.
If you do need a public link, here’s how to turn on link sharing in Google Drive safely.
Keep reading about Google Drive
Common questions
Does Google Drive scan files for viruses?
Yes. Drive checks files for malware and phishing and warns you before you download a suspicious one. Google Drive Help: how Google keeps Drive secure lists the limits.
Why does Google Drive say it can’t scan this file for viruses?
The file is probably over the 100 MB scanning limit, or it’s a file type Drive can’t scan. The message doesn’t mean the file is infected, only that it wasn’t checked.
Is it safe to download a file Google Drive can’t scan?
Only if you trust the person who shared it. Download it, scan it with your computer’s antivirus, and open it only if that scan comes back clean.
Can a virus spread through Google Drive sync?
Drive for desktop puts copies of your Drive files on your computer, so a bad file can end up there. Keep your antivirus running so it checks synced files too, and don’t open files you weren’t expecting.
How do I report a malicious file in Google Drive?
Right-click the file in Shared with me and choose Block or report > Report. In an open Doc, Sheet, or Slides file, use Help > Report.
I am Carissa Gudinoa, a technology buff, and Office online and Apple expert with over 9 years of experience. I am passionate about helping others get the most out of their Apple devices. I have written extensively about Apple products and technologies. I am committed to providing my clients with the best possible service and am always up-to-date on the latest Apple products and features. I also write extensively on other software available for use at minimal cost or free. This includes Word Online, Outlook Online, Excel Online, and other Office online programs… Check out more.