This is their modus operandi and it has been going on for years, and in the end it all boils down to how persistent the client is to get their funds back. I don't know how much that $100 means to you, but if you can survive without it, don't risk your documents and probably several months of delays that you can expect from them.
I know of many cases where much larger amounts were involved and where everything ended up positive in the end, but as I already wrote, the question is how much someone actually values their privacy and the time that needs to be invested to convince them that you are not a suspicious person.