Morally yes in the sense that they can do shit about it and bloody should, legally I think the ball is in the court of delivery companies, though. Providing fake return addresses is not something they should let senders get away with, least of all commercial ones. Write contractual damages into the delivery contract, hook legal up to the data feed, done.