A possible attack scenario could be showing a certain Bitcoin address but copying a different one to your clipboard.