This is not ideal since it will catch legitimate receipts along with the crap. As a temporary solution I've setup manual filters to dump them all in a folder. So I think someone is spoofing a few of my users' addresses.Like I said, the end result is that they're flooded with undeliverable receipts. While I'm aware that this can't guarantee the machines' digital sanitation needs, I'd like to hope that they're doing their job. All of my client machines are running licensed versions of AVG Anti-Virus 7.5 and the most recent version of Windows Defender. I can only think of two possible explanations: compromised machines or spoofed email headers. A handful of my users have started getting their inboxes flooded with undeliverable receipts from spam that they did not send. I run an Active Directory network of about 50 users and use Exchange 2003 for our email and calendaring.