They don't even have to keep the fee of the query is legitimate. They can reimburse it or keep it in the user's wallet when they consider that this was either a false positive or a honest mistake. The cost would be minimal but would deter a lot of people trying to game the system.