I wouldn't be surprised if your "friend" and his wife have their Amex accounts canceled AND get blacklisted by Amex to prevent any further fraud on their part. They stole points from fraudulent transactions and had the unmitigated gall to use the points before they could be taken back. The only sane thing to do is to call Amex and offer to reimburse them for the points they stole before law enforcement gets involved.