Irregularities with the email address, domain name, or links provided can spot phishing. If the email says you need to provide or confirm information and has a sense of urgency, that is a red flag.