Backscatter scam is huge nowadays. I get so many "ticket opened" emails from various zendesk instances, where the contents of the ticket is cheap dick pills and crypto scams. I don't think zendesk does any validation on the from-field on incoming support requests.