It isn't obvious it has been spoofed. It could have been sent from your friend's computer if they have got a virus. If that is happening many on the friend's address list will perhaps (not necessarily) have received similar.
The return address when viewing the detailed email header could be a clue to a scam, either sent as I just suggested, or by spoofing. Which I believe is quite easy.
Any attachments on the email must not be opened. Doing that is how many viruses are transmitted. Similarly, no links should be clicked.
The links can often be seen just by resting the cursor over them and it may show up in a status bar. Otherwise, "View source" which will open the html in a text editor. That can be a bit tedious searching through, though the text editor you are using will have a search option you can us to search for the text that is a link. The real link will be near to that in the source.
Kindness isn't going to cure the world of all its awfulness but it's a good place to begin. Daisy Ridley.
My broadband basic info/help site - www.robertos.me.uk.
Domains, site and mail hosting - Tsohost
Connection - AAISP Home::1 80/20. Sync 57825/13835kbps @ 600m. - BQM