How can the middle man know if the code is legit without testing it therfore he would get the MS points not you sorta a tuff middle man situation.
You can enter it and it will say, "This code entitle you to 1600 MSP"
But even if there was a middle man the kid with the code could just activate it real fast.