Phishing works because it rushes you. Your move is boring and powerful: slow down, check the sender, inspect links, avoid surprise attachments, and verify money or password requests through a second trusted channel.
You are done when you can explain why a message is suspicious without needing dramatic music.