It's about: https://discuss.flarum.org/d/5199-gmail-automatic-confirmation
Maybe you should change the standard message from "Invalid confirmation token" to e.g "Invalid confirmation token or your token was already used by your email provider".
Just a suggestion ?