Excellent point. Re-reading it now, it looks like the emails were addressed to/from safe-mail.net but the actual collection was from the cash processor's email,

Excellent point. Re-reading it now, it looks like the emails were addressed to/from safe-mail.net but the actual collection was from the cash processor's email, not safe-mail.net.