Ways to detect suspicious emails:
1) Is there are any links or attachments,
-there will be a pop-up URL shown when hovering over the link
-aside from common, .pdf, .doc, .jpg format, do not open any unknown attachment
2) check the sender, usually sender return address will not be from a same as example company.com
3) external sites asking for username, password, & account #
Common ways to verify is:
1) contact the sender and confirm they sent the message
2) use google and visit the authorized site
3) using verified sender contact and ask them to send them again
4) if it looks like copy of the original, compare it and see if there are noticeable differences (banner, wording, graphic, logo)