in the case where we suspend pages, it may still show the password prompt but the page itself is not accessible at all
aaah. that would explain it.
If I were to implement it and delete/suspend a scammers page, I would host a "you fell for a scam, be more careful next time" page for a few weeks to educate the potential victims. If they just see nothing or nothing after entering password, they might even naivly ask the scammer for a new link.