Comment by carodgers

I don't understand. What combination of actions and app features allowed the scammer to send an email that is indicated to be from google's domain?