You can change the OT name on pokésav and the pokémon is still legitimate, but you cannot change the ID/SID of a game using pokésav, that is considered hacking. If this friend is trading over the WiFi forums I suggest you make them stop and offer full refunds for any trades they have made, as they can get permanently blacklisted for that.