It is possible to spoof a SMS or text message. Additionally there is malware out there that can affect Android devices and send fake text messages. The infected apps are not super common though.
That I don't know. If you're on Android and have malware present, it may very well have full access to your contact list. Also if you're using a third party texting app or if someone has your facebook password even.