When querying Messaging Gateway (SMG) Message Audit logs via Status > Message Audit Logs, the From column in the report output may not match the From address displayed for the message in the end user email client.
Release : All
Component : Messaging Gateway Control Center
The Message Audit Log (MAL) displays the email address used in the SMTP network communication, usually referred to as the "envelope sender". The envelope sender address is the email address used for replies and is recorded in the message Reply-To header.
The sender displayed in the mail client as the From address is the value in the From header of the message. The email From header is a display only value and is not used for email delivery or routing.
This is expected behavior.