A method for processing electronic mail includes computing a probability that a text string in an electronic mail message refers to an attachment as a function of a stored probability value for each of a plurality of sequences of words within the text string. Where the email message lacks an attachment, the method includes prompting a user if the computed probability indicates that the text string refers to an attachment.