So you're seriously asking whether or not you can get in trouble for this? Are you fucking retarded or something? Using his paypal just means there is a verifiable trail they can follow straight to you. Once you use it, your ip is logged, your purchase is logged, if you get anything sent anywhere the vendor logs all of that information. Using his money when he doesn't know it is asking for a metric fuck-ton of trouble.