How can you tell when an email has been doctored?

[Melin]

Recently, a customer sent my boss an email which was claimed to have been
sent to me a few days back. I never received such email and I believe the
email was doctored because the attachment of the said original message was
not an attachment directly from the sent box. Customer forwarded the message
to herself first and then created the attachment from the inbox and claimed
that the forwarded message was sent on the given date as shown. I requested
the customer to send me the original sent message as an attachment directly
from the sent items without it being forwarded to herself first. Customer
claims she could not send me the original sent message because the message
was in her archives and she had to forward it to herself first.

I believe that one cannot edit sent messages while in the sent items box.
Therefore, a forwarded email cannot be accepted as an original message.
Customer must be able to attach the original message in it's untouched state
as it was originally sent. If customer forwards the message to herself
first, then she can edit the original message. Consequently, such message
cannot be trusted. Am I right?

 

[DL]

Any archived mail can be recovered to its origonal location