That kid better hope the real Sadie doesn’t get her hands on him.
Isn’t Sadie more of a girls name than a boy.
While a pain to sort it out, if just your credit card number is stolen, the bank eats the loss.
If they get the card number and the PIN, and use it like as a debit card, you eat the loss.
He could sell it to five people if he wants, and I don’t trust him not to. Just call the bank and declare it stolen.