The other thought that I've had, is it may not be HIM that tries to recover the money, but the cc company. And they have pretty good lawyers, and really deep pockets to pay them with.....so I would really be certain of what one does before fooling with them.....
Credit card companies rarely bother going after the person who used the cards. They simply withdraw the amount from the merchant's bank account. Pursuing a fraudulent user costs them money and they don't care WHO uses the card as long as it gets used.
It's across the board. I had a fraudulent user cornered with five different cards from three different major issuers -- even had the person very nearly pinpointed. The "investigations" department of each company told me the same thing: they didn't want to know, they'd already gotten their money back from the merchant.
I don't know how the Canadian equivalent of our FBI reacts, but when I contacted the FBI, I spoke with a helpful woman initially who was dismayed when, after contacting her supervisor, she was told that they weren't even allowed to take a report until there was a minimum loss of $25,000.
After that I did some digging and, sure enough, that is the standard procedure with credit card companies. So, when they advertise that they are protecting their card holders, they aren't. The merchant is. The price comes in increased costs of goods and services in order to offset shrink.