That is the issue with debit cards. Once a debit card and PIN have been pulled from a skimmer they can make a fake card and pull cash out of an ATM.
From what I gathered from the story her card was photocopied front and back but then doesn’t that magnetic stripe carry the same information? How was that stripe recorded with the info? Was it read with a card reader then transferred? Seems that’s the way it has to be done. But in her case ....