| 
 
			
			We get them at my work.  Usually it's some or a combination of the following:
 - The same email address isn't used twice.
 - The 'reply to' email isn't the one sending it.
 - It is coming from a country with fewer rules on acceptable internet/email use.  (Nigeria most infamously.)
 - Somebody has hacked a legitimate email account.
 |