Under the existing FP+ system, I don't know how he could "reprogram" their cards - did they stay off site and thus have their tickets on the card - without being able to access the magnetic strip on the back of the card. And I wonder if the piece of paper was the DAS. If any one in her party was caught, I am sure Disney security would have been more than happy to escort them out of the park and they would risk potential banning for life. This guy needs to be reported to Disney corporate and the local authorities for this scam. And those CMs participating need to be fired, pronto.
I'm glad she was able to ride 14 attractions during Hell Week, but you need to let her know she participated in fraud. Back of ticket states, "Not for Resale. Void if Altered".
As the saying goes, if it's too good to be true.....