My bro in law is a former ASUSA and has worked many cases with the FBI/NTSB/etc. I've forwarded him all the info I have and will see what he thinks.. clearly if anything comes of it, I'll stop posting.
Eric- per your question, I talked to my wife. She said he is definitely already breaking laws, and it is a fraud case regardless of whether anyone bites on his offer and loses money... and the fact that it covers several states does up the ante. She does not have much/any experience with all the various internet protection laws that would probably apply here.. and she's at her dad's, helping him pack for a trip, so was not eager to get too deep into discussion about baseball card thievery
I know there are a lot of lawyers on this board though, so if anyone has other opinions please feel free to offer them up.