Zip files are typically scanned by your email service provider. Sometimes they'll reject zips that are password protected, and sometimes they'll give you a warning that a password protected zip could not be scanned.
An unexpected zip is most likely a virus. You can scan it with ClamAV on Linux or Avast on Windows. Be very careful with unexpected attachments!