Questions

You need to see the Internet HEADERS to see who is the real originator of the message.
In Outlook Express you access the headers by right clicking on the message and then selecting Details.
An example of the headers can be seen below (the message pretends to be coming from WorldPay):
--------------------------------------------------------------------------------------
Return-path:
Envelope-to: eyeball@eyeball.co.uk
Delivery-date: Tue, 11 Jul 2006 18:08:53 +0000
Received: from [68.58.42.158] (helo=c-68-58-42-158.hsd1.in.comcast.net)
by server5.netcells.net with smtp (Exim 4.52)
id 1G0MfA-0004y3-Rx; Tue, 11 Jul 2006 18:08:53 +0000
Date: Tue, 11 Jul 2005 23:06:41 +0400
From: "Dave Gollick"
X-Priority: 3 (Normal)
Message-Id: <78422613.25375255@distal>
To: desk@eyeball.co.uk
Subject: [ORDER ID 0220712] WorldPay Chargeback
X-Antivirus: AVG for E-mail 7.1.394 [268.9.10/384]
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary=----------478B1823D50BF87
--------------------------------------------------------------------------------------