I know just enough about TCP to know there's a header which, among other things, contains the origin IP and target IP of that packet, which the internet uses to guide it to its destination and then on its return journey (the response).
If I wanted to make an illegal online transaction, could I write the origin IP header to point to some other person's computer, perhaps one I've compromised, then gather the data from that computer later and delete the traces, leading any investigators to the wrong PC and a dead end (once they try to prosecute the wrong person and realize they were tricked)?
This seems like an interesting and simple alternative to running the packets through a series of proxy servers and encrypting the TCP headers via a network such as Tor (which the FBI has allegedly developed a way to compromise). Is this a common / well-known strategy? If so, what are the flaws?