I was going to pile on, but after thinking about, a good company would have just refunded his money, even if it wasn't their fault. I would make it somewhat difficult like requiring a receipt to be mailed or faxed in, so you don't get everyone just asking for a refund. I would also block his MAC address from ever connecting again, but I would do it with a smile.