Look for any inconsistencies in the email address, spelling, and grammar. Legitimate companies usually take great care with their communications.