As the sysadmins say, Rule #1: spammers lie. If their "policy to forbid such actions" even existed it was a completely unenforced fig leaf of deniability, because that is in fact how their "person-to-person sales" contractors were allowed to spend their time until a third party did a little diligence and caught them at it, and unsurprisingly they're going to get away with it—there's been no mention of a lawsuit or anything to claw back what they got paid for poisoning the well.