They should blame store/app provider. E-commerce over the web is pretty well established, don't think people blame Windows/Chrome when some shady site frauds them.
Logically, you're 100% correct. But I don't think most folks will reason it that way. Do you think a senior citizen will follow that reasoning? And then how will they contact the provider? What is the provider doesn't respond (for the case of simple refund request)?