It's all his fault though and he can't do anything about retrieving it back, who is in the right mind that a valuable account's password will just be given to someone, even though it is a customer support of his trusted crypto exchange because at the first place there is no need for any website to get your password in just helping you to buy a specific cryptocurrency. It is ovbiously a scam and the owner acts so carelessly with this matter so this will serve a solid lesson for him.