Phishing emails are widely recognized as a key warning sign of predatory publishing. Despite growing awareness of these tactics, the term phishing email remains loosely defined, and many researchers--particularly early-career scholars--struggle to distinguish deceptive emails from legitimate journal communications. This article presents 20 specific red flags, supplemented with real-life examples, to equip researchers with practical tools to recognize and avoid predatory journal phishing attempts. The article explains misleading indicators that predatory journals use to project an illusion of credibility and legitimacy, such as having ISSN (International Standard Serial Number) or DOI (Digital Object Identifier), being indexed in popular databases, or providing free-of-charge publication. Furthermore, the article highlights the values of a holistic approach and self-reflection in judging the legitimacy of research journals.