|So care still needs to be taken when calling. As was stated, I wouldn't use any information included in the email. You can also check the email address. A law firm is extremely likely to be using their own domain for business email. If email received is using gmail or some other free account, that's an immediate giveaway. But even if it looks like an email from the firm, it may be hiding the real one, or redirected, or whatever it is those characters do to spoof someone else's email.|
I think some here have suggested that rolling a cursor over the email addy will show the real one. I guess the method depends on what type of device you're using to view it.