Probably highlighted before, but with the address and the card details he can easily purchase stuff online and have them send to a phony address to pick up.
After all most of the time the sites only require the billing address and the card details. I think he's scamming rather than having a change of heart, especially if it happened in a blink of a moment. Your brother was foolish for giving that guy his house details and further stuff like the home telephone number.
I would probably change the bank accounts and alert the bank of possible fraudulent activity.
Disconnect and self destruct, one bullet a time.








