In order to do this, you will need to use a mail reader that will display the entire header--such as mail or elm (not pine), Select the full header view of the mail and look for the following. These methods are not full proof, but generally effective at detecting fake e-mail.
. The first" from" line. There are generally two "from" lines in the header. The second "from" line can be easily modified. Check to make sure both "from" lines indicate the same origin for the message.
. An "Apparenlty-To:" header. If both "from" lines are consistent, check to make sure there is no header "Apparently-To:". If there is, this is an almost sure sign that the e-mail is fake.
Read more in News
Learning to Live Without Kenton