If you send a message to a list, that also has an email in the database, then the email will be cut down to just once instance of that same email address. 
This is a feature of the auto duplication removal.

The tokens you have mentioned are the tokens for the profile data (dnn datbase) not the list. Have a read of the manual about using lists and tokens. 

Under some circumstances it may be necessary to send list and security roles in separate campaigns. This is because the tokens for First name etc are different for lists than profile items.