You can sue the so-called "friend" for stealing the brush, or you can sue the bank for compensation, because there is no your signature.

It's strange that you can successfully apply for installment payment by stealing a brush? The bank has the responsibility to verify its identity. Failure to verify identity is dereliction of duty.

Credit card consumption must be signed, and credit cards must also be signed to be valid. Merchants are qualified to be defendants without carefully checking their signatures.