People sending out spam or viruses usually
create false addresses or use an address they retrieve in files on an infected computer.
Technically, it is possible to fake the receiver (the "to" field) of an email. For example, you may receive an email to your address email@example.com that is apparently sent to firstname.lastname@example.org. For checking the real addressee, turn on full headers in your email client.