I feel like this was the key part: "This makes no sense as I have had hundreds of payments and not a single payment has been disputed. So how could it be true that the payments are unauthorised?" Disputed and Unauthorized are two very different things - especially with the time frame of less than a month. It would have been much more convincing if he'd said "I've had hundreds of payments and all have been authorized by the end user" I suspect there's some sort of crowd funding element but either way shall wait to see what the blog post says.