In a lot of cases the grammar is bad, the spelling is bad, the way they’re laid out is bad.
Some of them are very, very good, but the vast majority of them are really quite bad. Look at the email address it’s come from, look at the web links they’re trying to send you to.
Do they look like they are the same as the general content of the email? So we quite often see them purporting to be from Microsoft saying, you know, there are some emails stuck at Office 365, click here to release those emails.
What they’re trying to do is they’re trying to get from you your email, username and password. So what they can then do is they can then send email out as you, pretending to be you. You then look genuine. You let it, and then people are then going to respond.
