As long as he didn't give out credentials to his bank account, he's well covered.
he's most definitely not covered. I would run this scam 24/7 with every bank in America if I was "covered" :)