If you didn’t deactivate the account, then I think you’ve got to work out how they managed to bypass the normal email verification step. From what you’ve described so far, I don’t see how this is possible.
Signing up locally would send them an email to activate their account, which verifies their email, and signing up using google would also verify their email.