Since you do not know the identity of the fraudster, you have a lot of "unknown" boxes to check in Part I. You do not put your customer's information on the CTR since they did not conduct the transaction and it was not done on their behalf.
_________________________
Sola Gratia, Sola Fides, Sola Scriptura, Solus Christus, Soli Deo Gloria!
www.tcaregs.com