If he calls blizzard hes not hacking it back 2 steps you can do get a(n) authicator for the account he can still retrieve through i think with an id or you get full name SQ/SA email control and buy new cd keys put it under his name get 25 bucks and transfer the char to the new account and a different server then ban his orignal account and you are in the clear