I hate to say it, and I'm not being judgmental in doing so, but: if you get on a first-name basis with an untrusted vendor, that's the first mistake.  All con men do that; it's part of their getting you to "take ownership" in the con. 

At least, inexplicably, this guy seemed to give his real name.