pull down to refresh

So a "chain analysis honeypot" would be like, we were tracking UTXOs some how, right? I am pretty vague on how this would work. Also, how could any individual or service prove that they were NOT doing this?