If it’s possible to send it back and the owner has been verified somehow, I’d keep 10million sats and send the rest back. An expensive lesson but I’m sure they’ll still be happy to get back 99% of it