

the address there can be faked, maybe your email client did not warn about it. if you can check the mail’s headers (maybe easier on desktop), look at all the addtesses you see in there and if thry seem suspicious.
also check the link they sent. Don’t open it, but copy it only.
it can. I’m not saying it does, but it absolutely can