Spoofing your IP address is easy, not changing it. But, people always slip up at some point in time...and is the reason many hackers are eventually caught.

I imagine if admin blocked IP addresses from foreign countries, it would significantly reduce the amount of spoofed IP addresses.