Not that it matters. I bet you he used the warez version Valve released to catch the pirates. So that means that his Steam access will most likely be blocked and he'll be banned. So it works either way.
If you make an empty account with nothing in it (no registered cdkey were needed for the warez version i've heard) then he could just another account... Not that it's a good thing to do anyway...
