My philosophy would be that the customer isn't getting statements, hasn't provided you with a current address as required, and you suspect there may be fraudulent use of the ATM card. Put it on hot status. As Brenda said, most agreements say it is your card and you can deactivate it at will. If possible, your customer will contact you and you'll get this straightened out.
It may be that your customer sent the card to someone who is authorized to use it. If it was a crook you'd likely see maximum withdrawals every day. But no matter. You're attempting to protect your customer and you have cause.
_________________________
AndyZ CRCM
My opinions are not necessarily my employers.
R+R-R=R+R
Rules and Regs minus Relationships equals Resentment and Rebellion. John Maxwell