he did use the balance. I pm'ed the next morning to tell him I want to take my cards back but he said he used them all up
Post screenshots of those PMs. If he already used them, there is no reason why he shouldn't have paid.
Interesting: https://bitcointalk.org/index.php?action=trust;u=85316 - Shows "This user's password was reset recently." - Possibly a hacked account? Maybe someone could get him to verify this is him or leave negative feedback to protect others in case of a hacked account.
January 26, 2015, 01:33:02 PM - Wardrick - password reset via email and January 26, 2015, 08:40:01 PM - Wardrick - password reset via email from the seclog. Assuming the OP is using the default timezone, it seems Wardrick was in control of his account when he sent these PMs (although the hacker might have redeemed the codes after gaining access to his account).