How to spot fraudulent emails in 4 steps