I don't think you should wait to catch them, it'll all just be one big clusterfuck. Print the emails and confront him. Then kick both their asses and throw him out.