diff --git a/xep-0280.xml b/xep-0280.xml
index d86d3035..c2884137 100644
--- a/xep-0280.xml
+++ b/xep-0280.xml
@@ -45,6 +45,12 @@
     <email>linuxwolf@outer-planes.net</email>
     <jid>linuxwolf@outer-planes.net</jid>
   </author>
+  <revision>
+    <version>0.13.1</version>
+    <date>2019-09-11</date>
+    <initials>gl</initials>
+    <remark><p>Add clear example on problematic (spoofed) carbon messages and that they need to be handled.</p></remark>
+  </revision>
   <revision>
     <version>0.13.0</version>
     <date>2019-04-24</date>
@@ -360,6 +366,24 @@
     </forwarded>
   </received>
 </message>
+]]></example>
+  <p>A client MUST NOT accept Carbons that originate from a different JID than the own account (See <link url='#security'>Security Considerations</link>).</p>
+  <example caption='Tybalt attempts Carbons impersonation attack on Romeo'><![CDATA[
+<message xmlns='jabber:client'
+         from='tybalt@capulet.example/home'
+         to='romeo@montague.example'
+         type='chat'>
+  <received xmlns='urn:xmpp:carbons:2'>
+    <forwarded xmlns='urn:xmpp:forward:0'>
+      <message xmlns='jabber:client'
+               from='juliet@capulet.example/balcony'
+               to='romeo@montague.example/garden'
+               type='chat'>
+        <body>Thou shall meet me tonite, at our house's hall!</body>
+      </message>
+    </forwarded>
+  </received>
+</message>
 ]]></example>
 
 </section1>
