Let the actual victim(the customer) know and leave it at that. They can file a criminal complaint or take further action as they see it fit. Don't go about act

Let the actual victim(the customer) know and leave it at that. They can file a criminal complaint or take further action as they see it fit. Don't go about acting like a vigilante. What if she does get arrested but she is the guy's gf/ex? What if she is a legit business partner? This things can will often go south in differeny ways. You were not target,a victim or a criminal detective.