I don't believe that the woman in this case authorized her step son's friend to use the debit card, she authorized her step son. You might ask her to file a police report, but you can not require it. Inform her that the bank may seek recourse against the boy in this situation... she may choose to go through his parents, but that is her choice. If she wants to file unauthorized EFT you must comply.
_________________________
"...muffins are just bald cupcakes." -- Jim Gaffigan