If someone had stolen ID _and_ checkbook, it might not have been the person you thought you were dealing with. I don't know if you looked into the winery / called it or whatever, but I'd have wanted some way to establish with fair certainty who I was dealing with beforehand. ( and probably would have accepted a check like you did given the amount. )

A surprising number of people don't know a check can be pulled back out of your account weeks after the deposit. Paypal or credit cards aren't much better. So far as I know using escrow, wire transfer or bank draft are the only "sure" ways payment can't be revoked