> how one is able to tell the difference...

Easy, you just hire a another hacker/PI to investigate them first...