An encrypted email is a message whose contents are protected with cryptography so standard mail filters and inspection tools cannot easily read it. In legitimate use, encryption helps preserve confidentiality for sensitive business or personal communications. In security operations, though, the same protection can make malicious content harder to detect before a user opens it.
Attackers may use encrypted or layered email to hide instructions, links, or attachments until the message is decrypted on the endpoint. That can bypass some gateway checks and shift the real danger into the next step, such as a click, redirect, or login prompt in the browser. Defenders respond with endpoint visibility, detonation of suspicious content in a sandbox, and careful analysis of the full interaction chain rather than the inbox alone. In practice, encrypted email is not automatically malicious, but it raises the bar for inspection and demands stronger downstream controls.