Oliver highly recommend to John (11/20/15) that his staff watch these two Cornell IT Security videos:
Phishing: Don't fall for it
You can check suspect email against the examples IT Security maintains at their phishing page:
Conversely, here are emails which may look like scams or phishing but are in fact verified Cornell communications: