Phishing emails are usually carefully crafted to look like legitimate communications. They still give themselves away in subtle ways, though. For example, check the subject line: If it includes your email address or an all-caps call to action, do not engage.