1. Verify the sender's address
Look at the sender's address (From: section). For example, an official email from York University should have @yorku.ca at the end of the sender's email. This applies to other institutions as well.
2. Verify the web address
Hover your mouse cursor (don't click) over the link (WWW address) and this will display the link's true destination. It should point to the WWW address of the organisation who sends it and this will confirm the legitimacy of the link. For instance, a legitimate email from York University that includes a link to a website should point to www.yorku.ca.
3. Asking for password, personal information, or financial transactions
Be suspicious of any email that is asking for personal information or financial transactions.