If your friend doesn't do anything about this transaction, I think your friend will avoid using this wallet. Maybe somewhere compromised, private key lost or visited once phishing site. Even I think you can't change anything by involving the government or others' help. Your friend should tried to find out what your friend did wrong.
) but I am about 800 miles from her so I cant retrace her steps at the moment. I go back to the town where she lives in about 3 weeks.