The thing is, he tried to mislead me into thinking that he uploaded it to pokecheck (I suggest you read the VMs, or, what is left of them -_-) when it was not. I don't know what purpose this was for, but my initial assumption was that he is used to sending .pkm files via computer, due to the fact that they are created from there. However, in hindsight, it may have been that he downloads the freely available, and possibly illegitimate files off pokecheck, and passes them off as being worth something, when they are just downloadable.
Either way, he is a con artist, and I don't think this should be acceptable on Smogon. I know it may not be necessarily 'hacking', but offering things that can be downloaded for free (in this case, for a BP, which takes quite a bit of work), is a shoddy tactic, and unless you want a community that relys on checking EVERYTHING against .pkm databases and seeing if the general public has access to them, I don't think it is a good idea for it to go unpunished.