They have various clauses in their terms and conditions which will favor their side in a case like this: you'll have to pay them and go after the scammer to recover your loss, which ofc is very hard to do.
Most likely scenario. You really should try to avoid that situation for 500$. Or taking the risk hoping they'll drop the collection for that amount.
Or you can try with less ethical (and illegal) methods like throwaway accounts but it's tricky to do because you'll need a physical address to get the card and a lot of fake documents to verify the account/address.
I can easily get some fake addresses to send the card too and fake documents would be possible too but that's just against my principle, I would never do something illegal.
But I'm really wondering if what I said would be a problem. I guess the person who got scammed (and lost his money due to his account was hacked or something) has to go after the scammer, not the one who received money from the scammer and just paid him btc, or am I wrong?