I think perhaps he should report it to his carrier as phishing. That might make it go away. At least for a while.