Both of you are correct, I think op was first time user of iphone, so he had no idea what Icloud lock is, latter on someone pointed it out and he came to know that he has been ripped off. Here I agree with s55 that one should not buy stolen phones but how do one know that the phone he is buy is stolen or snatched especially when no apple store yet in pak so no original receipt possible, secondly those who deal stolen phones ,I think presenting a fake receipt will not be an issue for them.
Solution to this would be a cplc like department who maintain stolen phone imei database in whole country and it would be buyer responsibility to check phone imei number in that database to confirm that the phone is not stolen. But here an other problem will rise, phone sellers will give bribe to database administrator and he will remove that imei from the list. 
Sent from portable device.