Some nefarious person has got hold of your email address and inserted the data in the To field. Your website mentions your email address, so it's publically available. The From name is not as relevant as recipient is based on TO email address. The From address may or may not exist but it's a reasonable guess based on your website domain. Why ? Because they have worked out you are not going to set up you own email address as junk. They are hoping you get curious and click on some links or make a phone call, but they have also inserted a 'Reply-to' which may be real sender or some other poor person whom they have 'borrowed' an email address. The best action is this: Delete the emails. Do not respond to them because that is likely to be counter productive and it will inform the sender that the email address is real and alive. So they may continue to abuse it. After deleting emails, compact the folder to rmove all traces from the mbox file. After a while, they get bored when nobody responds. Please advise anyone who has access to seeing those emails to delete and not respond under any circumstance.