It strikes me as very odd that the charge went through (and has apparently even survived several days) for a credit card number with a name that doesn't match.

Maybe its legit and the travel agent paid with his CC and his name doesnt show up in the airline's computer for whatever reason. Would be odd, I admit, but no more odd sounding to me than him successfully getting a charge through on a stolen number with non matching name on it. More likely scenario I would think is that he used the matching name on a stolen card number and that name doesnt show up in the airlines computer.

Definitely be ready to go on the offensive tomorrow.