[wwortiz]

They could be storing a hash of the first three characters just to check for this.

[sep]

Actually, he did ask for the first 3 chars, but also claimed that any 3 would do. Your idea still seems very reasonable to me, if I just assume he was speculating about the inner workings.