Blockchain does not authenticate the receiver, so there are all sorts of attacks involving substituting the payment address, from dumb (stickers over QR codes) to sophisticated.
That’s a completely different thing though. The problem here is deepfakes where someone pretending to have the authority to send money tells you to send money.