if these token generators are all false how do people actually cheat?