You’ll have to review Admiral Patrick’s response for tech details, but it suggests your email provider isn’t following the security controls used to validate the email source and likely isn’t encrypting emails either.

The best thing you can do is switch or upgrade provider.

*Edit: they may be doing some checks, which is why it’s in junk, but I’d be a bit harsher for clear forgeries and deny them entirely.