3 ms·The scammer just forges the FROM header, so it would appear to be from a corporate account.by superuser2 11y agoThe scammer just forges the FROM header, so it would appear to be from a corporate account.