Treat cautiously any unsolicited message and, as a rule of thumb, don’t click on URLs contained in their body unless you are 100% certain they come from whom they say. Please try to look into the message headers (here you can find how to do it in Outlook) because 99.95% of the phishing messages are coming from spoofed addresses that are easy to spot in the headers: for example they appear to come from John Smith from yourbank.com in the To field, but in the header you see that the sender is something like q23243sweybyf@123tyourbank.com (or from some other domain name)

When you receive messages containing URL-s you can always check the URL structure and real Internet address at mouse over (when you pass with the mouse over it). Be careful as the attackers are using very similar names or trick you by using numbers (ex: Cit1Bank, or Micros0ft, or Gogle/Gooogle, or Aple, or 1NG Bank). Also, be careful at URL structure – for example while https://authentication.mybank.com is a subdomain of MyBank, a construction like https://authenticationservice.com/MyBank/ is a subdomain of authenticationservice.com.

Please use an antimalware solution that contains web and content filtering modules, because these controls are very effective against phishing websites, blocking your access to dangerous pages, pre-validating their content and also warning you about suspicious aspects. Also, a good antispam solution will filter more than 90% of the phishing messages.