Firstly, it seems like you have the situation resolved by the end. However, should it resurface… I am a computer professional. IANAL. Spoofing your E-mail address to send E-mail is absolutely a crime.

This website suggests contacting local law enforcement and also the FTC / FBI:

“ However, if you believe you have been scammed by a phishing and/or spoofing attack, file a complaint with the FTC and look for signs of identity theft (see our section on Identity Theft for more information). You also should contact your local law enforcement office and file a complaint with the FBI’s Internet Crime Complaint Center.”

Since you had physically known each other, you might be able to tell the FBI to which organisations you were both part of and using the persons name (Danny, perhaps a pseudonym? However, I assume you know the persons full name) they can easily track him down.