Three.

A guy here in the UK recently wrote into a newspaper moaning that his account had been "hacked" because he kept seeing e-mail which he'd never sent being returned to him. Someone explained that anyone can forge an email to make it look like it came from his account.

So has she actually been hacked, or just doesn't understand how spammers do things? She's on AOL, so I suspect that she's not the most Internet-savvy person alive (no disrespect). This could be the case.