Check for quality of spelling, grammar and punctuation. Phishing emails usually have poor spelling and expression.
If the company asks for login credentials or personal information, it is probably a phishing scam. It is standard policy for companies not to request personal information over call, email, or text.
If the email uses scare tactics or has a sense of urgency and requires action immediately.
If the email has a generic greeting such as “Hello there” or “Hi Customer”. When companies or organisations contact customers, they refer to you by name.
Check for consistency in email addresses, domain names and display names.
Check for the way the email is signed off / signature. Companies always display a professional signature and provide a name and contact details. If this is not present, the email is most likely suspicious.
Be alert of unusual requests or payments.