"Tell them its from xxx yyy" could be a prank within a prank, trying to put the blame on another person.

Have they found the real source of the orders yet (computer address)? This doesnt sound like a smart perpetrator to me, just egotistical. Hopefully they are very computer-savvy, as they may soon find themselves in some trouble.