You're (unfortunately) right.
When you battle or trade with someone over wifi there's no way to see if your opponents pokes are legit or not, except if they have obviously illegal Traits
or Moves, something with wonderguard, Cresselia with Wish and the Baton Pass Starters for example.
BUT at...