On MtGox at least the name on the sending account has to match that of the receiver also, from their documentation.

So Dave Smith can send to Dave Smiths' MtGox acct - but John Anderson can't be conned into sending funds to Dave Smith's MtGox acct