Spoofing emails is really really easy but like others have said modern security like DKIM makes it easy to spot. Most email providers automatically put emails in spam if the headers don't match or are absent.