“Spoofable” describes a system, signal, or data source that can be forged so it looks legitimate. In cyber security, a spoofable asset cannot be trusted at face value because an attacker may be able to imitate a device, user, location, or message and make recipients accept false information as real.
This matters because many operational decisions depend on trusted inputs. If navigation, identity, telemetry, or authentication data is spoofable, attackers can confuse operators, redirect workflows, or hide malicious activity. In practice, spoofing appears in forged email headers, fake GPS or radio signals, impersonated IP addresses, and manipulated vessel-tracking data such as AIS broadcasts. Defenders reduce the risk by cross-checking sources, using cryptographic authentication where possible, monitoring for inconsistencies, and treating any single unauthenticated signal as only one piece of evidence.