Faking e-mails: Why it is even possible

Fake e-mails are routinely used in phishing and business e-mail compromise attacks. Why e-mail spoofing is possible at all? And how can you protect yourself?

Phishing and business e-mail compromise attacks rely on fake e-mails. But why is it so easy for attackers to make them so convincing?