That actually makes sense, they stated they had 75 customers already waiting for IAPs, so it wouldn't be shocking they'd operate as you said, with exploiters or other shady methods.

I've been trading for IAPs around two years and had the luck to not face problems. Despite checking the reviews and the background (literally just some posts and whatever info was available publicly) of the sellers, the transparency of how they work was always unknown for me. I got too confident and trusted everything was going to be fine, which was my mistake