"Scanned" faces in this instance isn't unique people.

500,000 individual checks could have been for the same person. While that is extremely unlikely, it's also unlikely they scanned 500,000 unique people.