Like scout said, report via the main site, all PMs are saved on the SR server for 4 months so if this is legit they will have easy access to the exchanges you claim to have occurred between you and the vendor and SR support will take the appropriate action.