Among the most obvious and easiest to spot signs that you could be looking at a phishing email are domain mismatches.

Another way crooks can bypass email protection in phishing attacks is through the use of QR codes. Since these come in .JPG or similar image formats, they rarely get scanned for malice.