The author states this after knowing the true identity of who sent the bogus email. At that point they know it's not legitimate.