I have a friend who found a way to make money with 0-confirmations spending, I know is not ethical but it is working and I wonder what are the legal risks?
Your friend is a scammer and if you follow him/her, you are a scammer too. It's bad.
Fortunately, I don't believe you can find too many victims for the scam method with 0-confirmation transaction. Good luck.