Cause: They are using a different address or spoofing. Check full headers. Fix: Block the specific sending IP or domain, or create a rule using “with specific words in the header.”
