It seems as if everybody here is missing the most obvious next step for you right now. Draft up a summary of events with times of messages, quotes from emails, and dates of events. Bring it to a lawyer, and get the lawyer to draft a letter notifying your ‘friend’ that they will be taken to court if X Y Z remedy is not taken. Send it certified mail.

Nine times out of 10 the letter itself will be sufficient and you won’t actually need to go to court. And if it isn’t remedied, you now know exactly where your ‘friend’ stands, and can use that information to decide your next move.

If your strategy post-penetration isn’t at least 18 years, you’re in trouble.