Look for misspelled URLs, generic greetings, requests for sensitive information, and unexpected attachments. Be cautious and verify the sender's legitimacy.