Kudos for the heads up. You have to be careful of browser redirects. In the address bar, make sure your Roku dealings are with Roku.com and you see that little lock icon to the left.(SSL)
I do hope you get your money back, but you may end up having to dispute that charge with your bank or credit card. Sometimes, a scammer is a little reluctant to issue refunds, even after he promises to do so.