How reliable are Whois records? Can they be faked, and if so, how easily?

Let’s say I look up a domain on WhoIs and see that the Registrant Organization is Example Company. How sure can I be that the domain actually belongs to Example Company? Can a malicious actor just say they are working on behalf of Example Company when registering, or are there stringent checks?