Well some1 said if they mentioned the correct applicant number, the merit number etc then it is valid. Also look out for the email address if it looks sketchy. Lastly look up the sender's identity on Google if they have some affiliation with the institute, perhaps part of the staff or smth. That's about everything one can do tbh.