manipulative online friend

so I randomly got close to a friend through discord online from YouTube, I used to vent to him and he vents back to me too, its been more than 2 years now and we talk on a daily basis, also I never really shared much about my actual irl version or my circle , (like irl friends) . Everything was good until,

one day (6 months ago) I had shared a reel, and for some reason, Insta decided to show my user ID (saying *USER ID* has shared a reel with you), so he got to know my account and stalked my friend circle then shared screenshots of them and also me etc. It started making me uncomfortable.

but that's not the end, he always talks to me about how he manipulated his friends or classmates in school, and says it got him ego boost or smth, and he kept glorifying it. so when he found my ID, he felt I became some what vulnerable and now started to leverage it with my emotions, and is constantly trying to control me, and my overthinking ass keeps thinking of worst case scenarios (like he literally knows my entire life maybe).

like okay I accepted that I fucked up and opened up to wrong guy, but what made me feel horrible is, before he confessed to me that he had found my ID through that reel, he said he contacted my friend before and talked them to about me and shi and that's how he got my photo, he said he had a "ego boost".

he still messages me and I still message him

idk what to honestly do, I don't feel comfortable anymore, really appreciate if someone had similar problem and had solved there way out of this situation with any harm