How to Detect and Handle Phishing Messages
Step 1: Identify the message as a phishing scam.
Some red flags include:

Urgent requests. Phishing attacks attempt to induce panic in the receiver and cause the person to act before investigating the authenticity of the request.
Bad spelling or grammar. Phishing messages are notorious for containing misspelled words or poor grammar.
Mismatched email address information. Make sure the email address displayed in the From: field matches address listed in behind mailto:.
Generic signature line. A university message is typically signed by a university official, whose name you can verify, and have credible contact information.
Unexpected requests regarding personal information. Be extremely wary of following links or answering questions from contacts you did not initiate.
Step 2: Check out links and attachments before you click.
Links can direct you to spoofed web pages or download harmful files on your system. You can hover the cursor over the link before you click on it to ensure that the address matches the link that was typed. You can always check the legitimacy of a message by going directly to the company or organization website or contacting them via phone.
Hover over an attachment to verify that the title matches the file type.  A document that looks like it has a name “something.pdf” might actually be a file “something.exe.”  An .exe extension means the attachment is actually a software program that you execute and is extremely dangerous; it can cause computer infection and data loss.
Step 3: Report and delete
If you suspect that the email is a phishing message, forward it to reportphishing@uconn.edu. Then delete the message from your inbox.

credits to https://security.uconn.edu/be-on-alert-for-phishing/#