For #2, I would absolutely first contact Upwork. This person in question has already shown that they are willing to steal someone's identity. This isn't some

For #2, I would absolutely first contact Upwork. This person in question has already shown that they are willing to steal someone's identity. This isn't some small misunderstanding that can easily be solved by contacting a reasonable person and sorting it out.