The use sent outdated token which were burned actually.
Tokens are outdated but they are not burned.
Thank you fixed it...
The user sent outdated token which he did not burn.
Tough lesson, but you did help the community by sharing this. I'm sure both lenders and escrows will be careful to avoid this scam going forward.
I hope they really do.