I always put a fake address on it, and dont put the recievers name on it and they cant do shit. If they questioned your friend he would say that someone sent him that to get him in trouble, and with no name, they cant prove anything. This has worked for me, but my last one didnt make it through, so be warned