Thank you. I tested this and it works well. I will indeed reply all to him (I won’t know who got it though, right?)
Only the names you can see will get it - but they will have been alerted to his trick.
Wrong. You will be replying to just the recipients you see listed in the email. The other BCC recipients are not sent with the email, your email client can't possibly know who they are (that is the point of BCC).
PS - when he complains that you’ve used “reply all” when you were bcc’d, make sure you have your best innocent face on - Oh, was I a bcc? I’m sorry, I didn’t notice that.
You might see more detail if you right click on the email line, click properties on the drop down menu and then click the details tab or routing tab.