I see this all the time. Legit mail from Google gets stopped by Googles own spam filters on our Corp google apps account. But clearly forged phishing emails purporting to be from our CEO (sent “from” their email address but not from Googles own servers when we use Google apps and have DKIM/SPF setup) gets through to the inboxes.