I assume they had a fake CC form and collected the CC number and information on top of the charge. So that'd involve cancelling the card and compromised PII.
Can you use different PII, like fake names with virtual privacy.com cards? I haven't used this service so I don't know how it works.
Yes, you can.
The scammers didn't also get to steal his entire credit card info...