Each of those should have a clear, unique response code. There should be no "maybe it's this, maybe it's that". A real-world example is login forms that tell you something like "Invalid e-mail or password".
Are you joking around with me or is my point just not as obvious as I believed it to be?
Edit: Not sure if that last bit sounds confrontational, please know that it's a genuine question.
