well it is Jones's email address
That's easy to spoof. What I'd need to see is the full header.
What email program are you viewing the email in? Can you check under the Edit or View menu and see if there's an option to view full or long headers? That will tell us where it was really sent from.