Sounds like a good time to involve the cops possibly? Sounds illegal to me...? They'll be able to link the protonmail and gmail accounts back pretty easily I assume
If there's some kind of staff site/portal/whatever with authentication, send them a unique link and somehow trick them into clicking it?