I know you mean to just inform him, but he asked how to do it, not IF he should do it or not. RATing, keylogging, phishing and all other form s of hacking is against the rules, but we do it anyway. He never asked you whether he should do it or not, just how to.