I had something happen to me,only not involving paypal or ebay.Someone got ahold of my bank card # and made a nice little transaction. First off, have your friend go to her bank and dispute the charges(my bank called their fraudulent charges dept for me).They will trace the disputed charges. After you do this, CLOSE OUT THAT ACCOUNT. Second, go to your local police dept.They may refer you to the police where your bank is located, but your local police will direct you.Then make a copy of that police report,give a copy to your bank and keep one for your records. The police stated that it is getting easier to get ahold of your Bank visa, etc. especially if you shop at unsecure sights. This is why I started using paypal. Before I would use my reg. CC or the one that deducts funds from my checking.Apparently this person must have hacked into somewhere online that I used my #.The weird thing is, when the police caught up,the person was not using my name, buy a MALE alias. Good luck to your friend. I hope this helps.