Originally Posted by fris

have your server admin look at the logs, if he is using a credit card he is probably usiung a proxy. in that case i would actually proably contact the actual card holder to find out if they are making the charges. and call the isp the ip belongs too. mostly likely he is using an anonymous proxy.

best advice i can give you.

go from there.