Just received possibly the best 'spoof' PayPal email I've ever got.  It looked exactly like the real thing .... an exact duplicate of the message sent to us for 'payment sent receipt'.  So be careful.  

Generally if you right click the address of the sender and click properties, you can see the email address of the sender.