Since you didn't post his callsign, it's hard for anyone to check, did you?
You can check his call here, or at
www.qrz.com, as well as several other places on the internet.
If his license expired, it may have been reissued.
It may be that someone actually worked some other ham, and got the callsign wrong.
It actually may be someone "bootlegging" but usually they won't be asking for QSL cards.