Exploiters can impersonate/frame users with this trick where CoreGui is modified. This trick could be paired with an alt account. An exploiter could join a game with an alt account and then apply the avatar of the person they are trying to imitate to the alt account as well as change the DisplayName property of the Humanoid.
Expected behavior
I would expect for this to not be possible at all, or at least some way to determine whether or not it’s faked.
A private message is associated with this bug report
