Email received from me by my wife but actually sent from cxx@xiilc.com

My wife received an email that looked to be from me, and used her name in a request for gift card details. I assume that replying (or even opening?) it would be a bad move? Can someone explain what is going on here and if we should be taking some security action?

Answers