Location is encrypted with key, so just faking particular location is impossible. And I guess, they'll transmit some incrementing number or timestamp to fight re-transmission attacks.
The nearby phone is the one encrypting its own location with the public key broadcasted, so in theory fake location is possible if you had control over the protocol in all nearby devices.