1. Verify the sender's address
Look at the sender's address (From: section). For example, an official email from York University should have @yorku.ca at the end of the sender's email. This applies to other institutions as well.
2. Verify the web address
Point the mouse (don't click) at the WWW address and verify the target. It should point to the WWW address of the organisation who sends it. For instance, a legitimate email from York University that includes a link to a website should point to www.yorku.ca.
3. Asking for password, personal information, or financial transactions
Be suspicious of any email asking for personal information or financial transactions.