They should be aware of look-alike usernames. They could click the link in the name to know if the look-alike is legit or fake. Just use common sense if the user has suspected motive, then that is fake.