It probably didn't. I had one the other day with the correct email address as a spoofed From: header, but inspecting the rest of headers showed it was fake.
Thats what I normally expect but when I copy the address or create apply, it still shows the legit PayPal email. I'm pretty sure it's spam but how do they pull that off?
It probably didn't. I had one the other day with the correct email address as a spoofed From: header, but inspecting the rest of headers showed it was fake.