This technique exploits the automated email reply feature commonly used ... comes from the victim themselves. When victims receive an auto-reply, they are less likely to suspect foul play, as ...

which is legally required for marketing emails A reply-to address that clearly doesn't belong to the person A "Your email has been received" auto-reply of support software when someone tries to reply ...