the problem is it has already elapsed for so long only he noticed. he should make a police report for credit card fraud, under the commercial crimes department.

had my CC cloned once more than 10 years ago, good thing got notifications, so managed to cancel the card and make dispute claims. the cibai thing is the bank would use small technical errors (didn't file dispute in time) to make it seems like your fault and make you pay for the fraudulent transaction.