My only theory then is ya got conned

Maybe he changed traffic sources or flooding with new traffic sources and left that little part out.
Or... The processing tanked. Check join page hits. Was the join page procedure changed or updated?
If so when? That join page is fucked getting phone number and address/email upfront before going to processor on a non secure page.
Lots of that in the biz these days. Either way... If you smell shit... Then 9 out of 10 times it is shit.