False positives are possible. Apple states that their hash function has about a 1 in 1 trillion chance of producing one.