Recovering funds is usually impossible, but a popular crypto vendor is paying nearly $2M to victims.