MUFG Cybersecurity interview questions

They first called me for a brief 15 min initial phone screening. It was just a base test behavioral questions, by the HR. Then she scheduled me for a phone interview with the hiring manager. He called and asked for about 30 minutes straight on questions pertaining to my resume and course work and whether I did anything in database systems. They said that I was going to be called for the final interview at their office , which was a technical+behavioral interview. But i never received the mail . 3 weeks later, when i asked them about the results, the HR said she was unable to provide me the position because of my citizen status. Why select me for the 2nd round when i dont meet the qualifications? She said they found the candidate suitable for their position by referral program! -_-