You can't take legal action as you knowingly provided him with your namecheap username and password.

You may be able to take it to small claims and sue for misrepresentation but I highly doubt it would be worth your while as you'd get reg-fee back for them at the most.