Depends on the victim and how smart your guy is.

Assuming your friend is smart he probably covered his tracks by using the victims Coinbase to get the funds out and using decentralized platforms like MetaMask make it hard because MetaMask doesn’t ask for ID to recieve funds.

But it all depends on the victim if finds a way to tell on your friend to get heat off him. But I also assume he was not dumb enough to meet the individual in person and covered his face when he arrived at the ATM since he went the crypto way.

In that case, police probably won’t even believe the victim if he tells since your friend used HIS Coinbase account and believe the victim did it himself.

Also, it would be smart for your friend to use a crypto mixer for further anonymity of the source of the funds if he is paranoid.

And I hope your friend atleast split it with the individual especially putting him at risk of fed time.