Very much agreed on most of your note. With regard to emailing your friend, most likely that will do no good, unless you send it to a different email. The hacker normally diverts any returning email, so that they can respond to the duped people to get their money. Best to call the person and let them know.