Con artists are targeting timeshare owners who want out – and some victims are hit twice