Hold on a minute anyone, this account has not been active for the last 6 months, probably bought or hacked account, for anything take a valid collaetral and a signed message from an old stacked address.
Don't say you haven't been warned.
I don't think that the account might be hacked or stolen because password wasn't changed in the last 30 days
May be he just need some money and remembered this way to do so
But Precautions should be taken in any condition
0.38 btc seems quite big for such account, isn't it ?