Surely they use deceptive techniques to try to broaden the base. I would not doubt they improperly accessing the email accounts when someone uses the same password to register.