For G Suite.
How to handle to the spam mail with spoofed sender's address ("Envelope From" address)?
For the HDE One service users who have subscribed spam countermeasure service, an effective solution method against spam problems [Reputation check] feature which examines the domain of the mail sender’s address (Envelope “from” address) is provided.
However, the SPAM countermeasure service of HDE One Service cannot help you reject reception of the spam mail which is spoofing with the actually existing address or domain
For such kind of spam mail, usage of the contents-filtering-feature which examines the mail text is recommended.
Please refer to the following G Suite support site and try the contents compliance setting on the G Suite admin console.
*This setting is a feature of G Suite. For further details, please check with the G Suite agency.
Concerning the spam check feature, refer to the article below as well.