I am just asking, due of nature of bitcoin, is very difficult to catch a person making bitcoin this way. But what are the legal risks if he gets caught?
If you're worried about legal risks, maybe you shouldn't do it in first place. But answering your question, it depends whether bitcoin addresses can be linked to other information (e.g. exchange account, social media account, etc.).