Ask them to check the buyers IP address with the one that was used to make the payment at the time, if they match there's no reason he should be making a chargeback. If that don't work out or if he was a smart ass using a VPN at the time of the payment it kind of seems fishy that they waited 17 days later to report it and IDK but I'm pretty sure they had probably accessed their PP in that time frame..