The way I imagine it working is that you essentially send someone a fake notification that, if clicked, causes some kind of drain. I dunno how feasible that'd be to implement though, but I like the idea of spells that attack users directly.
The Beef Baron