A phishing spam email that purports to be from a bona fide entity will not have the actual address of that entity. The return address on the email may look like it is coming from a bona fide and reputable entity, but if you look closely, you will see that this is not the case.
Letís take, for example, a scam email that allegedly has been sent by eBay. The website address for eBay is eBay.com. Email that actually comes from email will bear the return address that will include, simply, eBay.com. A phishing spam email will have more included in the return address. While it may be made to look like the eBay address, when you examine the return address, you will see it is not. For example, rather than being from eBay.com, it actually will come from something like info.eBay.firstname.lastname@example.org. Check out the email address closely.