Afaik, he isn't in any way liable for where the cryptocurrency comes from or under what circumstances it was gained. KYC regulations and anti-money laundering provisions only apply to exchanges. At most he's legally obligated to report the transaction because it's a taxable asset.