Of course he did. We really believe you. Tell him to call the bank; they'll reset it for free, no hacking needed.