And worse if they told you the source then you would figure out how to make that source stop giving our your information and might even tell your friends and a that would make his life less fun. Clearly the OP isn't actually interested in the job so not responding is the best strategy.
I've found that it's more blatant than that. Often their "source" is LinkedIn or Google.