Yea it sucks. I lost 60$ trying to exchange M60 retail code for famas. Took me exactly 4 months after my claim got denied by PayPal, I had to try my luck with Citibank. It was such a hassle, but in the end I did got my money back.
Lesson learned. It's really hard to trust someone over internet. Stakes are high.