[RightGeek]

If it's "well spoofed", then it will appear in your Sent Mail. Think of it as being like a Gmail Send Mail as entry. While Gmail requires that the user authenticate these before it allows you to use them, the SMTP protocol doesn't require the Sender to be authenticated. If I send you a message with the sender field set to "You ", Gmail will recognise that as sent by you and will file it in the Sent Mail view.

However many spoofed messages are sent as "your_a...@gmail.com ". While these look like they came from you (the text email address is shown in the display), Gmail can easily recognise that they didn't because it looks at the real email address inside the "<...>". We can see the difference if we look at the details using the drop down.

[ConservativeMind]

“If I send you a message with the sender field set to “You “, Gmail will recognise that as sent by you and will file it in the Sent Mail view.”

That is preposterous. Provide a reference.