This is clearly theft. What he used the money for is not relevant. The card was put out for a specific use, and this use case was not the intended one. Had he actually bought an iPad, everyone would agree that it's theft. Transferring money between someones else's card and your own with out permission is theft.