First, double-check the header. If you see a bunch of random letters, numbers, and symbols in the email address, that's your first clue that something is fishy. Secondly, double-check the spelling in the header. Some scammers will replace certain characters with a lookalike to trick people.