He said he's from Canada. As such he should report it to his country's equivalent agency. His first bet would be his credit card company, which has fraud prevention. If he's a seller than he should simply refuse paypal and ask for wire transfer or money order?
