[valevk]

On the 20.09, I received a totally legit invoice from [e-mail] (99.99€ Candyclub - Bag of Gems). The sender is [e-mail], but no names, no other personal information. I thought it was somewhat strange, and reported it, but no answer.

[mikkom]

It's extemely simple to fake the sender of email. That's what probably happened.

[valevk]

I just thought it's strange, becuase gmail usually detects email spoofing.

[tokenizerrr]

Sure, but google uses SPF and DKIM. The spam mail would not validate and be marked as spam.