Cybercriminals use email spoofing to trick recipients into thinking that an email is from a legitimate sender. This can be done by forging the sender's email address, display name, or both. In some cases, the spoofed email may even contain logos or other branding from the legitimate sender to make it appear even more authentic.