You don't have any proof that this is an actual scam. This is similar to physical bitcoins, you just have to trust that they created the key in a safe process without saving it.