# Spot a mail sent in someone else's name

When the address a mail shows in From does not match the address it was actually sent from, XgenPlus marks the sender "suspicious (Mail was sent using ...)" with the real sending address. Mail relayed through another service shows "via" and that domain. Open the sender details in the header to see it, and check before you act.

## How to spot a mail sent in someone else's name

1. Open the mail.
2. Hover over or click the sender in the header to open the sender details.
3. If you see "suspicious (Mail was sent using ...)", compare that address with the name shown, and do not reply, click links or open attachments until you have checked.

## When to use it

> Anita gets a mail from "hr@acme.in" asking staff to log in and update their bank details. The sender line says "suspicious (Mail was sent using noreply@bulk-mailer.xyz)". She deletes it and warns her team.

## Good to know

- This check is automatic. There is nothing to turn on.
- A "via" label is not always bad. Newsletters and forms often send through a mailing service. Combine it with the **External** label and your own judgement.

Source: https://docs.xgenplus.com/mail/suspicious-sender-warning/