How is what the researcher did vigilante justice? The researcher found fraud, and then reported it to the appropriate authorities who investigated further acted

How is what the researcher did vigilante justice? The researcher found fraud, and then reported it to the appropriate authorities who investigated further acted on it. It would be vigilantism if he had gone outside of the proper channels to try to “solve” it himself, say, by hacking servers or something - but that’s not what happened.