My teenage son has received this email and is worrying about it.
I've told him it's a scam which I'm convinced it is but just to put his mind at rest, I thought I'd get some clarification on here.
It's been sent from his actual email address to himself, that's the part that's weird.
Best way forward - block himself on his email address if that's possible?