The vast majority of fake billing emails (trying to get you to call their "support center" where they will endeavor to scam you) appear to come from #Gmail. These typically carry various signals that #Google could use to block them from being sent to non-Gmail addresses, but they don't bother.
@lauren I've always appreciated the bounce emails from gmail. "Your email does not conform to RFC 822." Uh, could you be less specific? And, BTW, that's been obsoleted for years now...
@agreeable_landfall Actually 5322 is even newer, but even that is almost 20 years old now. Point is, they are all widely ignored these days in various respects.