probably just

consider most naive possible way one would try to deceive users without exorbitant budget -> attempts a few things you naively would do -> recovers it by chance?

if that even is a valid signal though