I think in his case they simply built up trust, and made it seem incredibly casual. It's hard for me to know exactly because I wasn't super privvy to what was going on, but by the time I talked to him about it he effectively trusted them over me.

It all would have been so clearly a scam to anyone with any internet sense at all it blew my mind he would have been fooled.