Individual users can’t fake zaps. Zaps are sent by zappers (usually alby, lightning nodes, wallet of satoshi, etc). They can fake zaps if they want to. They don’t because people would treat them as non-trustworthy and people would switch away from them.