Re: [exim] No MAIL verb before RCPT

> On Feb 13, 2017, at 5:08 PM, Phillip Carroll <postmaster@???> wrote:
>
> Viktor,
>
> The headers do not indicate this was a purported bounce. It had a normal from header:
> From: "Amazon.com" <amazon@???>

The "From:" header is quite irrelevant in this context. Especially
with email scams, the message envelope will often have no relationship
with the headers.

You could check the "Return-Path:" which is typically where the envelope
sender is recorded on final delivery.

-- 
    Viktor.