If you recieve spam emails that come from an email address you know - such as a friend's - then it’s understandable to feel concerned
It’s almost certainly the case that the sender’s email account was spoofed.
Email spoofing is the creation of email messages with a forged sender address. It is easy for such messages to sneak into your inbox, too. That’s because most email systems simply do not have a mechanism for authentication when the email addresses are genuine, but the message itself has been sent from a cloned account.
From your own point of view, there is nothing to worry about if you receive spam emails from a friend's email address, but avoid following any links within them.
Clicking on the email itself isn’t the main risk (though opening any attachments can install viruses).
The scammer wants you to click a link within the email then enter personal or financial details, which you mustn't do.
Advise your friend
Don't reply to the spam email directly. If you wish to let your friend know that you have received such messages, create a new email addressed to them.
We have advice you can follow if your own account is sending spam emails.