DJR Group, LLC

In Aug of 2010 my son went online to look for info on loans for people with bad/no credit. He had to have a car. Two online lenders contacted him by email and he filled out their applications. He also received two phone calls from lenders but refused their offers of 200.00. He does not remember if the two who called were the same as the two who contacted him online. He is not great at keeping tabs on his checking account but after several OD's, including today, he called his bank and discovered that 60.00 has been withdrawn every 2 weeks since Sept 24, 2010 for a total of 600.00. He also discovered that just prior to withdrawals a deposit was made in the amt of 200.00. All this was done, according to the bank, by DJR. They provided a phone number and after several redirects he finally spoke with a representative who told him that just by filling out the online app and putting his name on it qualified as acceptance of loan (that he did not even existed as of yet) and as an e-signature. They had emailed info to my email address back in Aug stating that they were verifying info and could make direct deposit into his acct but since he was not interested he did not respond. Is this legal? He officially stated he never wanted loan and requested they stop taking money from his acct. They refused unless he paid lump sum of 260.00. The withdrawals up to this point have been refinance fees and if he closed down his acct they would pursue him through collection agencies and report him to credit bureau. Should we pay this lump sum and be done with it or close down his acct? I'm amazed that this is legal. We did file a complaint with the FTC but really need to know how to proceed from here. Thank you for your time! Please help!