Not sure if this is correct, to post user messages without his consent. Atlhough, I understand that in the context of what is happening, this must be done
Don't post the message. Just post the list of messages in your inbox, showing that the kind hearted lender sent you a PM.