Maybe a stranger suggested it to him on popular social media apps like WhatsApp, Discord, or Telegram, or he found it on a social media platform. It is worth noting that there are no reviews on YouTube or in blogs about the new Vegobit exchange whose domain is only 55 days old according to Whois.
Also, Trustpilot should not be relied upon primarily because if you take a look at
Reviews.io [Archived] you will find that they bought fake reviews for their scam exchange where all the reviews were posted 1 month ago [this is really ridiculous], but the fact that the exchange is new, along with analysis from
Scamadviser is enough reasons to make it necessary to stay away from using this exchange completely. What happened with the OP and other victims is a typical approach used by scammers operating such fake exchanges. It is worth noting that there are many more popular and trusted exchanges in the crypto arena with a long-established history.