Check for warning signs: unknown sender, urgent threats, generic greetings, spelling errors, and suspicious links or attachments. Verify the sender’s domain, hover over links before clicking, and avoid sharing personal data. Organizations like Federal Trade Commission advise confirming requests through official websites.