Yep, but since the user was in the hands of the enemy and was unaware of that policy, they assumed that Moneygram was a blessed option since the website said it was.

This is a pretty sophisticated fraud attempt. Everything is totally legit until the last possible moment and human nature makes the last bit much less suspicious than it would otherwise be. ("Apropos of nothing, would you wire $4k to an anonymous stranger in a foreign country?")

Many, many, many users will fall for it.