forge e,mail address

Extremely easy. Spammers have been doing it for years...forged "From:" address fields are also Standard Operational Procedures for viruses also. The only wat to tell where an email is coming from is to look at the headers to tell which ip address the email really originated from. Spammers are also starting to forge the orginating ip address to cover their tracks. They're using non-routable ip addresses such as 192.168.*.* and open email relays are accepting their emails.

it's extremely easy... It's called "Spoofing".

If you just search the web for that term, you can find out step by step how they do it... There are 2 websites. 1 from the betterbusiness bureau and one for the government... Both which you can report (forward the e-mail with headers) the spammers and they will file lawsuits against them or close them down. Only took 10 years for em to figure out they needed that.