It's legal because when you tell people you know that this has happened to you - unless it happened to them personally as well, they will just assume that you don't know what you're talking about or confused.

And so this practice thrives.