They place your email address in the from field because lots of email program are not that smart filtering spam. Web based mail is a bit more effective at stopping spam, but even it can't catch them all. A solution that I've used for years is Mailwasher, which is a stand alone program that all it does is attempt to stop you from seeing spam in your inbox.
You can set up filters in most every mail program/webmail that is out there, But they are usually limited in what they allow the end user to filter by.
To get into some Deep detail. There is a lot of information in your emails that is not displayed generally. You can view the raw email or "Source" and see a lot of this information in the header or Top of the email. This is even above the from and to entries.
Here are some of those header items.
Return-Path This line will have where it was supposedly sent from. Using the example email address of firstname.lastname@example.org as the receiver of this email The line might actually email@example.com or something completely different.
X-Original-To will probably be your email address in this case firstname.lastname@example.org
Delivered-To Which WILL be the receiver's address (ie email@example.com)
The Big tattle tail line is
This line shows the route the email took to get to you. It's added to along the way from sender to receiver and can't really be spoofed easily.
it might say something like this.
Received: from host223-150-38-89.static.arubacloud.fr (unknown [220.127.116.11])
by mx7.gmail.com (Postfix) with SMTP id 706BD3FBE5
for <firstname.lastname@example.org>; Fri, 28 Oct 2016 16:28:12 -0700 (PDT)
If you can view this line it will tell you where it came from. In this example France. (the .fr on the end tells me that. Or you can look up the ip address in the brackets)
There are additional lines to the header like X-Mailer: which in this spam email I'm pulling this from as an example says "X-Mailer: Microsoft Outlook Express 6.00.2600.0000"
that's the supposed program that generated the email. This line CAN be spoofed and in this case they did it badly because Outlook Express is out of date but they never bothered to adjust their spammer program to spoof something that's a bit more up to date.
Again Mailwasher Pro combined with the custom filters created by Wizcraft are a great starting point.
If you run mailwasher first it will examine your emails and even let you safely preview an email before it ends up on your computer., Mailwasher has a learning system installed and as you start marking your emails as good or bad, it will learn what to expect. Mailwasher is free for a single email address.
Yes I'm blowing the program's horn on this, but it does the job great. I use it on an email address I have had for over 18 years and will commonly see in excess of 200 emails a day, I sometimes get that many over night! But I don't see them when I go to look at the mail I want to read because they have been removed.
Forgive me for sounding dumb for asking this question (actually a couple questions) with possibly an obvious answer. Should I assume my Yahoo email has been hacked when I find junk ad emails in my "Bulk" mail folder showing my email address as being the sender? How is that possible?
I don't see these emails weekly, but sometimes I'll have couple in one week and then it could be once every month or two. When I check my "Sent" folder I don't see anything showing that my email address actually sent this junk mail. Sometimes it's junk advertising, but occasionally I have seen the subject saying something like "Please find your receipt attached"... or something along those lines. Of course I do not open these -- I just delete them.
I have had this email for probably 16 or more years. I have occasionally changed my password (maybe three or four times) since I've had it and I don't know if it actually made any difference because it wasn't that frequently that I actually checked until more recently.
Have I been hacked, or is there some visual trick from spammers where they can use your email address as the name but actually send from a different address, and how concerned should I be? Thanks in advance for your help!
--Submitted by: Sandy N.