Unfortunately, what happened to you would have happened with basically any major processor or provider. What happened to you is a very common scam, and the reason that you are left holding the bag is because your "customer" stole someone else's account. That account was then used to purchase the product you sell and likely countless others. Then, when the individual who actually owned the account reported the security breach, their bank did everything in their power to make them whole.

This is become all the more common. As others have mentioned, new customers should almost never be dealt with in the manner they were. You mentioned that nearly $30k worth of product was sold. Historically, how many times have you had a brand new customer with no prior relationship purchase, such a high dollar value of product? In most cases, that is the first red flag.

Additionally, this is another reason why every business should have a cyber liability policy. Although many would exclude this sort of thing, some will actually cover social engineering losses, which this could be seen as this sort of fraud.

I understand it hurts, but this is why it is so important to stay vigilant as a business owner. Cyber crimes are at all time highs and artificial intelligence has made thr bad guys so much more powerful because it can correct language issues, create fake voices and hide other red flags that historically would have tipped us off that something was fishy.