This seems highly suspect on BTCRows part.  Are you saying you just send money to an address without ever sending an email to the person to verify the address is correct or their address to begin with? 

How do we know BTCrow isn't directing funds to their own addresses?