i would have thought that by keeping your money its tantamount to fraud.
I would call the police and ask them but Im pretty sure the company has to give you back the $ for the 2 transactions.
Oh, and before you do, ring the company back and advise them you have notified the police and they are following it up