It was a false accusation. Asked for proof and the user never logged on again.