Email spoofing can be done as a result of how email devices are created. The client software assigns a sender address to outgoing messages, so outgoing email servers can not determine whether the sender address is authentic or spoofed. Bcc stands for blind carbon copy which is analogous to that https://emailgenerator.email/