Domain being spoofed (email)

Hi, I definitely didn't send this so I think my domain is being spoofed. But, I believe I've set up email security correctly in the Cloudflare dashboard so could someone please help me figure out what I'm doing wrong?