Have him change his password to log in and password to his email.


Also, remind him not to give away his log in info to hopefully stop this from happening again.