Here's how Etherscan says token transfers can be spoofed
Last year, Etherscan admitted a big problem with how it labels token transfers, namely that ‘From’ labels are easy to spoof. Spoofing is when someone disguises a sender’s information to fool victims into believing that they’re interacting with a trusted source. Spoofed ERC-20 token transfers look similar to legitimate ones, with names and symbols that look identical to their legitimate counterparts. However, they involve a completely different token. Often, the contract address and the date on which the token was first minted are the only ways to distinguish between the real and spoof transfer. A common tactic adopted by scammers is to promise an airdrop and then disappear with victims’ ETH once they’ve purchased the fake token. Besides stealing ETH, scammers can use spoof tokens to redirect investors to phishing sites and steal funds after they authorize access to their MetaMask. In other cases, traders will tag an address belonging to a wh...