Hmmm.

Maybe they had some sort of way to get normies wallets connected to testnet? Or were they using a web-wallet and then linking to mempool-testnet to "prove" the funds were sent?