Any suggestions for "legally" messing with a scammer? Vigilante justice
So a d-bag managed to get hold of my Walmart account login and placed an order for a $250 surround sound system for in-store pickup using a CC stored on the account. He didn't change any of my account info -- just added his name and cell phone number as an authorized person to pick up -- so I saw an order confirmation email and cancelled it (I also changed password and removed all CCs) within minutes of when it was placed. Walmart.com was slack jawed about doing anything about it, but the Charlotte, NC store was far more interested, since this is apparently the second time in as many days that he's tried to the same scam.
My question: I now know his name, age, cell phone, wife's name, city of residence. For a couple bucks I can also find out his address and home phone through Intelius or USsearch. Any vigilante retribution suggestions for making this a-hole's life a living hell without landing me in legal hot water?