The Display Name, also referred to as the “Friendly From,” is half of the From: header defined in RFC5322. While the address field of that header is used for routing the message to it’s destination, the Display Name is what the recipient’s Mail User Agent (MUA) will most often show to the recipient, sometimes without also showing the address field. For this reason fraudsters will often put misleading information in the Display Name, even a complete email address for the domain or brand they wish to impersonate, while using a non-existent domain, or one under their control, in the address field.

The Display Name, also referred to as the “Friendly From,” is half of the From: header defined in RFC5322. While the address field of that header is used for routing the message to it’s destination, the Display Name is what the recipient’s Mail User Agent (MUA) will most often show to the recipient, sometimes without also showing the address field. For this reason fraudsters will often put misleading information in the Display Name, even a complete email address for the domain or brand they wish to impersonate, while using a non-existent domain, or one under their control, in the address field.