Look at the email address domain and wording in the email, grammar, salutation, spelling, etc. If any of these are questionable, it's most likely a spoof.
* Forward the entire email to: firstname.lastname@example.org. * Do not alter the subject line or forward the message as an attachment. * Delete the suspicious email from your inbox. * Never click on any links within the email or open any attachments.