The short answer is yes. Anyone can forge the sender (From) field of an email and have it claim to be coming from pretty much any address they want.
At first glance you might think “That’s horrible, why do we allow that to happen?” The truth is that it’s rather common, and you might even do this yourself, though for entirely innocent reasons.


