If you are unsure about an email you can usually find a lot about its 'journey' to help you decide. This is what to do in Gmail on a laptop, but other mail systems will do similar - for instance in Thuderbird you can go to view - all headers to get the same information.
So - gmail on laptop: open the email (never click on any links, and unless you have a business account no 'read receipt' will be sent so the sender won't see a trail). Towards the right of the email level with the sender address are the usual reply, star etc buttons and three dots, click on those and select "show original" from the list that appears. The email will opens in a new window and you can see the original source. Scrolling down will show all the servers the mail has been through. There may genuinely be a few steps, lots of corporates have complicated routing, but it (say) purports to be from Evri and the originating server says its from "I am a villan in a faraway place.com" or anything that doesn't make sense then its spam or phishing. Delete and/or report.
Sounds complicated, its not. Quick after the first time.
Hope that helps.