Well, if i were you, i would transfer the character off to a different account.
Make a new account with the same last name as his account and xfer the character.
Or if u want to keep the character on the same account, call blizzard and ask them to change the e-mail to yours. Say u got scammed or something.
Or you can just take all of his stuff and sell it, then send the money to a different account, and then launder it and then sell it to a company.
Or you could just sell the account on toonstorm or mmowned or something.
A lot of possibilities.