The only way to know for sure is to verify your friend's signature in offline.