WTF can paul or Julio do about it ? It's not their problem and they can't do anything about it.

The best you can do is file a police report of they need his personal info from the Ia servers (assuming he used his real name bday and email) then they will subpoena it legally from Paul and he will comply

but he can't do anything outside of that except maybe ban the kid