Well, when you put it that way...
I'm not confident that I'll get the money back. But that's his choice at this point. I've made him well aware of the situation that he put himself in, so let's see if he does good for himself. I have the phone numbers for the bank fraud and cyber crimes divisions of his local police department (nh Google), most likely I'm making the calls on Monday.
I spoke to him two days ago - I'm actually doubting I'll hear from him again. Pfft, whatever, that's what cops are for.