Scam. It doesn't work, so when you mail him the new key saying it doesn't work he just changes it back to the original by working his method backwards. Obvious and fairly clever.