You told him right.Legally, if it is a Credit Card, and not a Debit card, he is only liable for the first $50.00, and almost no institutions make a victim pay that.
The sad thing is that usually the vendor gets to eat the fraudulent charges.
Debit cards, I don't think have the same protections....but I sure would like to know what the liabilities on those are....
Anyone know?