I reckon it started as an access phone scam (steal funds from online banking etc) and then they checked his Revolut app. Who buys and stores with Revolut, seriously?