To prove that he is the original owner of the account, he should be summoned to sign a message from this address or else I think it will be safe to assume the account changed hands

I'm tagging the account for now. Will remove if he can provide a signed message.

The problem is, you have to give him chance to speak up and prove ownership of his account for while, that can be done by signing message from the bitcoin address he once used.