@CAPPilot posted:Yes. Checked with the sender that was listed in the from address using a different email, and he stated he did not send it.
In the case of the two I got, the from address was valid and the same as the real address. It was not until I expanded the headers to view more detail that I could see that it was from a totally different email server. It's very easy to make the normally visible header fields all look correct, you need to look closer. When I check the from and reply to actual contents, they are Alex's real email address. However, some of the other fields that you can expand and view make it obvious this is probably a bogus email.
The crooks are pretty devious.