I’m assuming he didn’t send the message correct?
If this is the case, I have seen this several times. Including my own e-mail address.
Some spammers have been sending e-mail messages from themselves but using the target’s e-mail address as the reply-to or as the senders address. I’m not sure other than using the reply-to feature how they’re doing this though.
Do you have any further information about this issue?