I saw somewhere that the link in the email is associated with your PSU ID. If that is the case then they will know by the fact that one PSU ID has more than 1 email and PSN ID signed up on it.
I wonder if some idiot gave the URL to a friend, and so on...
I seen a few posts allready saying they passed the email on to their friends. Sony should make those people not eligible.