An asset is uniquely identified by an asset ID, which is a pair of both the policy ID and asset name.
The Policy ID is a hash of the monetary policy script that was used to mint the token. What prevents someone from minting more of the same tokens using the same policy script?