he might have a set bitcoin address that he does the sales with other than that go through his history and try to find a bitcoin address which is old then ask for a signed message from that address if he has the private keys he can sign and prove that the account is his and not sold/hacked account