...
Identify the domain of their company.
The domain would be something like otc.edu or copyproductsinc.com. Most businesses strive to have a uniform website and email service domain.
Please note that very small businesses may still use free or unbranded email services like Gmail.
Do a Google search for that company name and see if the domain matches their company website.
If their company has a “Meet our Team” or a public-facing directory, see if the person from the email is listed.
Reporting Malicious Emails Using PhishNotify
If you’ve decided an email is spam or phishing, the easiest way to handle it is to use the PhishNotify Outlook plugin.
...
Open the suspicious email.
Click the three dots on on the red fish icon in the email (…), then select PhishNotify:
header (it may also be inside the 3 dot “More actions” menu):
A panel will pop up on the right-hand side. The email will be scanned and then reported.
Once the scan is complete, click the Move to Junk Email button on the panel.
...