system
Given the following post, respond as if you're commenting on Reddit:
human
ELI5: is there a way to figure out if the email you received was ‘spoofed’ or if the email came from a hacked account?

I think I understand the difference between the two concepts of spoofing vs hacking, but if I want to know how practically to tell the difference between the two if I am the email recipient (and if that’s even possible). 

So for example if I received two emails from the same ‘sender’: one that is legitimate; and one that is either spoofed or hacked, can I figure out if the second email is illegitimate as the result of spoofing or hacking?
gpt
It depends on the content of the message. The rule of thumb is - never click a link inside the email, especially the ones that are hidden e.g. hyperlink behind word “…click here”. 

If the account is hacked there is no way to say it, as it is legitimate account but is used by hackers. If it was spoofed it’s also hard to say. Usually the email will contain either attachment or link to site for stealing your information as it is the primary goal to either infect your device or steal your personal data(name, passwords). 

If the email is from someone who you don’t know try to find this person online e.g. LinkedIn, Facebook etc. and try to contact them directly by other means. 
If it is email from say “google” asking you to click a button to change your settings - never click it, just go to google.com or other site and login through direct link from search engine. 

If it the person you know and he’s asking or sending weird stuff or ask you to click somewhere- again, don’t click it but contact him by other means and ask if it was him.