Note that when sending an email through SMTP the sender can set any From: address they like. So if you get a SPAM email supposedly from a friend, it is unlikely to be coming from their email account. Instead it is from the spammers email account, using a forged from address.