As long as you get the link and put it in MDE before paying you are probably fine. There should hopefully never be someone standing at check-in with a problem. Once the reservation is within 31 days and still in MDE I would think it's almost 100% safe. If someone wants to scam you, they wouldn't willingly put their points into holding to do so when they already had your money before that and could have cancelled on you already
Unless their plan was to change the names on it and use it themselves I guess, but someone at disney should be able to track them down (if they wanted to help you)
Unless their plan was to change the names on it and use it themselves I guess, but someone at disney should be able to track them down (if they wanted to help you)
