That's only possible if the clients doesn't care and validate the service public key. Maybe what you are seeing a workaround implementation where the validation of the zap is skipped.

Reply to this note

Please Login to reply.

Discussion

Maybe somebody should spam fake zaps so those missing checks become unacceptable.

Good example where fighting fire with fire actually works

I guess some people would consider it unethical, especially if it was a considerable amount of zap spam but with some few well placed zaps - 30 million Bitcoin for fiatjaf etc. you could make a point, get heard and not disrupt the network.

Unethical sending fake zaps? I believe it's a really good exercise. What can be broken, should be broken.