Of course they can. I've worked for a couple of places where they don't provide any references at all as a matter of company policy.
A reference is not a right, nor is it generally worth the paper it's written on.
