I'm sorry this happened to your friend. It's surprising that the requisite data for her to open a bank account was not considered too personal. I opened a bank account not long ago and it felt like they wanted to know every vague thing about me. It's a good reminder to set safeguards so that routine does not desensitize you to dangers.

It makes me wonder how the scammers transfer the money out, because that all feels traceable. Was she able to find a way out?