If the wallet software being used is shitty enough and the end user is not careful I'd say it's possible