CBorJB wrote:
If I can’t see the headers, how can I rule out if the email is from the real company or someone pretending to be the company. I know if the grammar is poor that is a major sign but what if the email is well written? I prefer to check the headers before taking any action. Why would Apple not give us the ability to verify the sender?
If you want to verify the identity of the sender, set up certificates and digitally sign the mail.
As you're likely well aware, sending email addresses are routinely spoofed, and reading through the SMTP headers is a problematic approach at best. Some header forgeries are crude, and some others are pretty good. And the points of injection can and do vary.
Worse for tracking down these folks and these activities, the spammers routinely and rapidly churn through domains used and the forwards are often keyed or time-limited, all in an effort to thwart efforts to shut down their businesses.
If you'd like to see a view raw source capability added into iOS and iPadOS, log some feedback with the folks at Apple:
Product Feedback - Apple
Otherwise, you can choose to forward the entire message to Apple, at the phishing email address. Or delete the message. Or you can repeat your question around the lack of raw-source access of course, though the answer remains the same. iOS and iPadOS do not presently provide the capability to view raw message source.