As an addendum for the OP, according to Florida statute, what he did with your "receipt" was forging & uttering, a felony in Florida. Although the crime was committed in HIS home state, you can provide a pattern of deceit through the CC company and his communication from him to them. Also you have his address, find whatever hospital is closest to him or within 50 miles and check patient admissions. That's not a violation of HIPA. Fxxx that guy.