Yes, sad but true, most of the spam only pretends to be sent from the account listed. It is a simple matter to spoof anyone's email address, and not necessary to have the password or even to know the ISP or web service used. So we must not think the occasional spam on this forum actually comes from the person it spoofs.