There are two ways, Amethyst and I think Damus allow you to encrypt the zap so only the recipient knows who sent it, Amethyst and others including Coracle use an ephemeral key so no one knows who the zap came from at all.