You should have requested him to send the code first. Being that you are both Jr. Members, you both likely had no reason to trust each other.
be sure to use escrow or request trade history info from whoever you plan to transact with.
Good advice. I would have accepted any such measures if CryptCard had requested it.