he needs to revoke access to his identify, thats a rookie mistake, letting someone on your account