An email does not have to look suspicious to deserve a second look.
1. It creates a sudden account problem
A warning about a blocked account or failed payment may be bait. Check through a website you already trust.
2. It asks for information you should protect
Requests for passwords or financial details deserve independent verification.
3. The invoice is unexpected
Before opening or paying, confirm what was ordered and who requested it.
4. The next step is a link or attachment
An unexpected file or sign-in link can be harmful. A familiar logo does not make it safe.
5. The message supplies its own verification route
Do not rely on its phone number or reply address. Contact the person or company using details you already know.
Make checking a normal part of work
No single sign proves an email is fraudulent. The useful habit is to pause and verify independently. Give your team a clear person to ask when something feels wrong.
Further reading: FTC guidance on recognizing and avoiding phishing scams.