Oh, so it was a scam?
I might just have blanked it out

But because we don't know yet who or what bitmax is (owner of address UAqA), i think there is still a possibility that they were the one who was scammed 🤔
For instance, if I try to pay someone Bitcoins, it's not my business whatever they do with it, no?

Ofc, this is just one possibility. both address could also be owned by the same entity.