hi,

Make sure you document well the date/time the card was wrongfully used and amounts. Since most ISP use DHCP, the date/time is really important because the IP that guy has today may not be the one he has tomorrow.

...