No, they didn't take his money. They probably didn't even take the money out of his bank account.
Yes, they did take his money. They did the same thing to me this week. They debited my account on Monday and then canceled my order for being "high risk" on Wednesday. I emailed support, but at this point I have neither my bitcoin nor my USD.