Downside is they most likely are using stolen tokens, not paying themselves so it cost them next to nothing.

Regardless, this forces them to steal more tokens. Any token wasted not getting money reduces the efficiency of the scam. The end goal would be increasing the token expenditure above the amount they scam from people.