Look at the email address domain and wording in the email, grammar, salutation, spelling, etc. If any of these are questionable, it's most likely a spoof. * Forward the entire email to: email@example.com. * Do not alter the subject line or forward the message as an attachment. * Delete the suspicious email from your inbox. * Never click on any links within the email or open any attachments.