The issue is that he didn't. A malicious network was created via bluetooth TV in hotel that caused his phone to connect to it. Once they added his phone to the "game" they spoofed the screen.