Just FYI Swede, if this ends up being a scam, not all of us hold you responsible. It's obvious to me at least that you have been acting in good faith.
edit... What contact methods have you had for Sam? Anything traceable like a phone number, personal email etc.?