For certain high-value targets, perhaps they're lying, with the intent of getting them to initiate some sort of compromised password reset?