I carried out an online transaction but the merchant may not be trustworthy. What should I do?