Out of curiosity, was her card the type that needs a pin code for the purchase to be completed? I only ask because several years ago, someone (a mover that was packing up my household belongings for a cross-country relocation) stole my Visa credit card and used it to make cash advances out of 2 atm machines. This was just a regular Visa credit card, not linked to any bank account for debits or anything like that. He had to have a pin number to get cash advances, and I had destroyed my pin number (I don't need a credit card for cash advances) and I had no idea what the pin number even was. I never was able to learn how he was able to do that without a pin code, unless he had a contact at the bank that issued the credit card that provided that to him.
Her card can either be used as a debit card or a credit card. It only needs a pin when used as a debit card. The guy made the charges using it as a credit card.