SDM Foundation has an excellent blog post entitled: "How to Spot a Fake Email: Simple Clues Anyone Can Use". Check it out!
Here are some Quick tip-offs:
1. Are there misspellings?
2. Is the sender someone you think you know? Click on their name to see their real email address.
Does "Theresa Brown dbjssdjhddjdbdd@gmail.com" look legitimate to you?
If the Subject states something like: "Thanks for your order - this invoice outlines...." then BEWARE!
3. Check their domain address.
4. Trust your gut.
5. If in doubt, contact the SDM Foundation or use Contact on the NSCS website.