I'd say to carry on as usual and do not contact the client. I always find the best action with anything designed to provoke alarm or anxiety is to ignore completely and pretend it hasn't affected you - this comes from ongoing abuse from a sociopathic ex who does stuff like this, and more, to cause me anxiety. I have learned that no response causes them to stop for a bit. I have also learned that by the police giving them a visit to give them a friend hint to stop what they are doing also symbolises that their actions have caused you alarm, and they therefore continue, despite the threat from the police.
I have had emails claiming to be a wife who found out and hired a PI to follow me, disclosing my full name and address. This, of course, was my ex trying to fear me into stopping work and therefore becoming under financial stress. Under the malicious communications act, this is a crime, but police really can't do much without hard evidence. Even with evidence, such as malicious and threatening emails from someone, enough to press charges, the accused can easily get off by saying that it wasnt them who sent the email even though it came from their email address. Again, this is based on experience.
So unless you have video footage of the person posting these threatening photos, along with a clear image of what they are actually posting on the footage, there really isn't much evidence to prove it was them and charges to be pressed. All that will happen is that you get stressed out for a few weeks with police visiting you for statements, then waiting on phone calls from the police to confirm the outcome, all the while you dont work because you are so stressed. Trust me, just ignore and keep doing what you are doing. If there are more incidents, keep a record and if you have solid evidence, then go to the police.
These assholes want a reaction, don't give them one.