So far I wouldn't say he's done anything legally actionable. But if he comes back to you with something dubious... well, if it's just dubious, get a lawyer's opinion. If it's more than that, then yeah, report him and take whatever legal means you must to get him picked up and charged.