Who’s it From
Do you recognise rhe sender’s email address?
Is the mail from someone you know?
Is the sneder’s mail addrss from a suspicious source -eg microsoft-support.com?
Is the email unexpected or unusual?
Hyperlinks
Is the link address differnet to the web site?
Content
Does the mail have bad grammar or spelling errors?
Is the sender asking you to click on something or open an attachment?
Subject
Is the subject line relevant to the content?
Is the mail message a reply to something never sent?