This is trickier than you think and cannot be put into words in a few sentences. However, we did write a blog about it and you can find it here. https://limenetworks.nl/spam-of-phishing-mail-herkennen-voorkomen-en-oplossen