There are several techniques that attackers use to spoof emails:
Display Name Spoofing: The attacker changes the display name to make it look like it’s from a trusted source. Domain Spoofing: The attacker forges the domain to match that of the legitimate sender. Reply-To Spoofing: The attacker manipulates the “Reply-To” address to redirect responses to their own address.