> just created an account, but did not access any data.

that specific account they caught didn't make data requests according to Google. It doesn't mean there are no other fraudulent accounts.