[jjeaff]

You would need to prove that. And for all we know, he borrowed the account from a friend who didn't know he was using it to test the API.

[Karunamon]

To block them from their platform and press charges if they do not? The block doesn't even need to be casually connected to the API usage - if they say go away, and they choose not to, that's CFAA territory.