There is the possibility that the guy originally intended to steal the bag, but after doing it had a change of heart and decided to give it back. Maybe he was desperate, used the money for a meal, and decided that it was wrong and returned the rest.
But with that said, I'd cancel the cards just to be safe and change any passwords that could have been hacked from the phone.








