I am not sure about the year 2007, but in 2026, they need to be under your monetary authority somehow. That's why most crypto exchanges do not offer service in Europe. Your monetary authority might have a form or an email for complaint and depending on how pro-active they are, they can make the other counter-party very proactive.