The From address can be spoofed.
You can block that, but its useless.
Because the spam will keep coming.
You need to trace the real originating sender, via raw messages.
If you know how to trace back, and once you find the real originating sender, block that, and you will have peace, for a while, till they find out and then use another originating sender.
Realistically we well never get it to end, unless/until the fed govt does make a move with the anti scam centre, where we can block all overseas sms/emails.
But you can block certain words that spammers/scammers use, tho, might help slowly decrease the number of scam/spam email.
Block and delete all numbers you do not know, overall, the only way then for them is to use private/unknown numbers.
The message header looks like this, and gives some detail beyond the spoofed address to the originating network:
Return-Path: <
[email protected]>
Delivered-To: <<oatek>>
Received: from hbr.org (unknown [20.104.181.29])
by mail107.syd.optusnet.com.au (Postfix) with ESMTP id 3A10FA7BCC
for <<oatek>>; Sun, 8 Oct 2023 07:27:44 +1100 (AEDT)
From: McAfee-Support <
[email protected]>
Subject: Your McAfee Subscription Expired...Click To Renew Your Subscription ✔ï¸
To: "
[email protected]" <
[email protected]>
Content-Transfer-Encoding: 8bit
Content-Type: text/html; charset=UTF-8
Date: Sat, 07 Oct 2023 22:20:47 +0200
X-Optus-CM-Score: 0
X-Optus-CM-Analysis: v=2.4 cv=Ov+JiQzt c=1 sm=1 tr=0 ts=6521bf42
a=qOP4kQaZ2y9M8IoduC3rgg==:117 a=qOP4kQaZ2y9M8IoduC3rgg==:17
a=Hw0Mmq7ZktixO_Fg:21 a=HpEJnUlJZJkA:10 a=IkcTkHD0fZMA:10 a=A4EqBspgoKYA:10
a=Kt334dqhAAAA:20 a=EHXyxjODAAAA:8 a=8hvds1fHAAAA:20
a=3M-Nb1cqQJ4oviD0js8A:9 a=tYPnz4Xoi544y/aXBLnqIbUYSpc=:19
a=QEXdDO2ut3YA:10 a=158JBnxfT_sA:10 a=MKlBoUQYahkA:10 a=vSr81jqQ6S4A:10
a=ZXulRonScM0A:10 a=DRKanpuQW3IO4WuHEcHe:22 a=ZT_8zCgGubuJgGonBfBE:22
a=U3ntZA5cGlblmH1F8fJ5:22
X-Antivirus: AVG (VPS 231006-4, 10/7/2023), Inbound message
X-Antivirus-Status: Clean
X-Antivirus: avast! (VPS 231006-4, 6/10/2023), Inbound message
X-Antivirus-Status: Clean