Has he contacted an admin (Cyrus would probably the best bet currently) with a signed message from an address that can be seen on a post on his account (as can be seen here)?
If not, he should do that ASAP. It is time consuming to try and verify identity through any other means, and it is unlikely an admin would bother going through the trouble.

Also, delete old bumps as you make new ones.