If a stranger sent it, if it promises free money, if it's asking for your password, if it seems too good to be true—don't click it. Just don't. Duh.