I don't get it. You want to send the theif a message? Call the police and have him arrested. Don't pull a knife, don't kick his ass. Have him thrown in jail. Doing that will probably deter the criminal at least somewhat. Maybe more importantly, there will be a record of the crime, and a record on the criminal. Sure it takes some of your personal time, but it's the right thing to do.