When I look into the spam I receive, it seems very common that they use X-Reciept: to indicate my real and valid e-mail address, whereas the To: can, as you already pointed out, contain just anything.

Try that and see if it fits your needs.

---

Everything went worng, just as foreseen.