God, these email spammers are lazy. Can't they put different email addresses on "To:" and "From:"?
I just received a email address pretending to be from a bank that no one I know, including myself, has an account. The classic Brazilian trick, "we need to re-check your data". Well, apparently the spammer forgot to spoof the bank's email (or even try, like, putting @bakn.co instead of @bank.co), and tried to spoof mine in the hope of getting my (non-existent) account details. Nice job.
I found it on the spam folder with the tag "This message may have not been sent from this email address", btw. This means it wasn't sent from a Google server, from the little I know of anti-spam algorithms.