The whole scammers thing is true. We have faced it with SourceLair. Thankfully there is 3DS 2 now and you can be super strict with which transactions you can accept. IMO the safest way to go is accept transactions, where you have no liability.

Also, using a SaaS service providing a complete checkout experience can make this super easy for you.

I see this sentiment often expressed on hacker news and it seems to be happening more and more often