What Is From header?

The author identity in the message

The From field belongs to the email message itself. Mail applications often display a friendly name prominently and hide the full address until the reader expands the details. That presentation can make two messages look similar even when their underlying addresses differ. Inspect the actual mailbox and domain before treating the displayed name as reliable evidence of who sent the message.

SMTP uses a separate envelope when transferring mail. The envelope sender can differ from the From address, particularly when a service handles bounce processing. A Sender field can also appear in certain messages. These are distinct concepts, so a screenshot showing only the friendly From name is insufficient for diagnosing an authentication or reply-routing issue.

Why outbound setup needs the distinction

DMARC evaluates alignment against the domain in the message's author identity under its rules. An SPF pass for an unrelated envelope domain is not automatically an aligned pass for the From domain. Similarly, the presence of a DKIM signature says little until the verification result and signing domain are known. Avoid treating an address typed into a composer as proof that authentication has been configured.

Review a real received example

Preserve the original message, expand the complete From address and compare it with the envelope-related and authentication fields added by trusted receiving systems. Confirm that the identity matches the approved sending account and business purpose. If a platform rewrites an address or signs with its own domain, document that observed behavior rather than assuming it uses the brand domain.

From identifies the purported author; it does not prove permission to contact a recipient or guarantee inbox delivery. Keep identity configuration, authentication evidence, reply handling and campaign qualification as separate checks, each with a clear owner and a real received-message test.