They guy likely had temporary access to someone's database and copied down a few customer's credit card info. Likely it was some autoparts place in SoCal... there are few down there... Gruppe-S, StopTech, Oakos (I think)... the hell if I can remember all the places I've used my card at online that are based in LA!
The guy isn't going to prison... unless he violates his 3 years of probation. I didn't really get an explanation about how he's supposed to pay me back, other than to be told it's via the CA treasury dept. and that they don't release the money to me as he pays them, they release it when they've compiled a significant amount... which is where I assumed there may be garnished wages involved. No sense in sending me $5/mo... I'll get a check once a year or something I guess.
I'm not sure how the credit card companies detect the fraudulent charges... but whatever algorithm they use, it seems to work pretty good. I've had my card number stolen twice in the last 6 years, and both times they figured it out as the charges were being made, and they've never falsely detected a legitimate charge. The 1st time I got my card stolen a while back, some guy tried
twice to charge $7000 worth of light aircraft parts to it down in Minden!

And this time, a few of the cell phone bill charges went through before BofA detected the fraud, but they
called me about it and reversed the charges no questions asked! So, as much as BofA sucked when they were my bank, they do a pretty good job on the credit card side.