Legit? And how to?
Yes it is legit. You have to get the top score at all 4 beaches and then go to the surfing place in Heahea City (literally the building to the right of the PMC). You will then get a surfing Pikachu and be told how to do the Over the Gyarados move.