Dude, they can create a new wallet address that they have never posted or it’s not connected to their account and deposit some of their coin there which means this your post is totally wrong.