Email Address Spoofing

You can see additional info in the email source. Use that to report the email to proper authorities.
As to why this is happening, this is how spam/pishing works...
SPF and DKIm help validating the email comes from the right source, but this doesn't mean it cannot be spoofed, as you can see.