That “poorly written email” advice for spotting phishing? Dead. AI writes flawless scam emails now. Here’s what actually still works to catch them before you click.