Fake “find my” alert?

I received a notification (banner) that a friend had shared her location with me. When I texted her, she said she hadn’t shared it with me. What’s odd is that this alert did not appear on our text thread. Anyone know what it could be? I’ve also received what appear to be fake “google account sign in” notifications with no email or account activity to back up the sign in claim.