this is my first thought.
If you dont want to nut up, then you send an anonymous package with detailed information about what is going on, and what to look for and he will figure it out from there.
This is a no brainer, i dont even understand why you would not be sure on what to do?