People sending out spam or viruses usually
create false addresses or use an address they retrieve in files on an infected computer.
Technically, it is possible to fake the receiver (the "to" field) of an email. For example, you may receive an email to your address firstname.lastname@example.org that is apparently sent to email@example.com. For checking the real addressee, turn on full headers in your email client.