Look for clues
Most of the time, your email service will be smart enough to filter out suspicious (or phishing) emails from your inbox – but there are plenty that slip through the cracks. Before you click that link or open any attachments, read the whole email carefully. Look out for any attempts from the sender to trick you into visiting a site or providing personal information/money—"or else." Even if the sender's email address seems legit and looks like it's from a social media platform, brand, or institution you use regularly, it’s better to visit the website directly or draft a new email to a confirmed address to ask about it. This includes those from your trusted address book. For all you know, your friend's account could've been hacked. So, brush up on some common phishing scams and red flags through your research online and report any questionable emails to the authorities.