Look carefully at the full email address, not just the display name. Scammers use addresses that are close to, but not the same as, the real company.
Hover over any link to see the actual destination URL. If it does not match the official domain exactly, do not click it.
Phishing emails often create panic: your account is frozen, your funds are at risk, act now. Legitimate companies rarely pressure you this way.
No legitimate company will ever email you asking for your recovery phrase or private key. Any email that does is a scam, full stop.
Instead of clicking links, go to the official site yourself by typing the address into your browser, and check your account there.
Slow down, verify the sender and the link, and never enter your seed phrase anywhere. Those three habits stop most phishing.