He says they cloned his card, so they probably either had a card skimmer installed on top of the ATM's card slot or a tiny hidden camera to photograph the card. Now they have his name and account number. They then followed him home to get his address. Then they looked him up in the phone directory to get his land-line number.