This question already has an answer here:

So I went through my junk today as I wasn't receiving a sign up email from a service I signed up to. Looking through and another email caught my eye. The email looks like it has come from my own account (even if I reply to it the email is my actual email that it's replying to!)

A quick search of the bitcoin address brings up this: https://www.bitcoinabuse.com/reports/17zmnmqEUCesNz6UgXGbRk7fKnu8iq1q2J


Now I know my account is secure as my actual password is completely different and I've got 2FA. But how is this done to make it look like I sent the email to myself? (The old password they've provided I'm guessing is from another service I signed up to that got hacked and the passwords were leaked)

marked as duplicate by schroeder Dec 27 '18 at 14:13

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • The From field can be literally anything. The right tool can make the From field appear to come from anywhere. – schroeder Dec 27 '18 at 14:12