Anyone can use any name, but there's a "verification" standard, NIP-05, which basically shows that you have control of a website, or the website allowed you to access some settings, for example here in stacker.news you can be verified by NIP-05 if you put your nostr public key in settings.