- The message is sent from a public email domain. No legitimate organisation will send emails from an address that ends '@gmail.com'. ...
2.The domain name is misspelt. ...
3.The email is poorly written. ...
4.It includes suspicious attachments or links. ...
5.The message creates a sense of urgency
Finally always report all suspicious mails to the appropriate office for investigations
Bless up