If he didn't use a hardware wallet such as electrum, where he had control over all his private keys, but instead used an exchange to make the transaction, such as coinbase, poloniex, or bittrex, then yes.
He probably has no access to the adress he sent the bitcoin from as the exchange does that, he only has one receiving adress.
But, when i trace the adress,
https://www.walletexplorer.com/wallet/b257888856706ef8?from_address=149Vu5bbQKgxs4C6xRXiZaJMSVmabQ2pveIt is part of a wallet with only 1 adress, which is 149Vu5bbQKgxs4C6xRXiZaJMSVmabQ2pve, and it is not part from any big exchange, except coinbase?
Ask him from which wallet / exchange he sent it from.