Hi Handian,
This is called "spoofing". To stop outside people from spoofing your domain, you will want to investigate setting up a DKIM for your domain:
Use DKIM to validate outbound email sent from your custom domain
If this is helpful please accept answer.