can he manually change the token so the hacker has no longer access to his account or is that not possible?
My friend got hacked and he has no clue how. He has the 2 step verification by phone number, we don't know how to report that and how to make sure...
Separate names with a comma.