Saying the emails are fake would be a direct acknowledgment of the incident that the agency is trying to investigate. This is similar to the “Glomar Response”. https://en.m.wikipedia.org/wiki/Glomar_response.