Naively, alert his bank that he was stealing money from everyone and share the PayPal email with them. I wasn't aware at the time that I could take the matter to small claims court. PayPal offered no assistance as far as laying out what my options were. They were fine with it, it seemed. Zero on actual customer "care."