The most important tip, though, is to ALWAYS look at the sender id: [email protected] is NOT Netflix.
Legit businesses do NOT send this kind of thing.
If you were to click on those links, you'd be taken to a very convincing phony website that would collect your attempts to log in, which would capture your actual netflix login and username.
It helps that I don't have a Netflix account, but it's important to recognize all spearfishing attacks.