you should always look at the sender's address. don't focus on the content. also, if it were real, you should also receive a message within the app