That's stupid. Just invoice his address for the money and attach a nice admin charge. Or alternatively let PayPal know that someone approached you to alter their id documents. You refused, but managed to obtain the original document. Attach this to the mail.