I reported an issue with spoofing on the Google play store about 6 months ago. They told me there was no timeframe for the fix, and no fix yet as far as I'm aware. Maybe if I post it here someone from google will do something...

Just so everyone is aware, you can use any email address as your company email address on the google play store without verification. This means when looking at an app, you see the email is [email protected] and think it's from them, but it's not.