Example: my business email for instance is yoyo@yahoo.com, and some days I receive spam email from yoyo@yahoo.com, and it is spelled exactly the same, and if I email it back to it, I will receive an email from myself. How do they do it?