Most debit/credit cards in Australia are "tap n go" and don't require pin for below 100$ purchase. Banks can get him refund if a case is lodged as it's covered through insurance.As for the robbers using the debit card, how did they use it? did your friend gave them the security pin as well?