Hello @mara2021
You could try Message Header Analyzer to check the email headers to see if there is a delay or the real sender to rule out spoofing.
https://mha.azurewebsites.net/
Kind Regards
If the answer is helpful, please click "Accept Answer" and kindly upvote it.