There are some recovery services you might see online, if they say they can provide you help, know that they are fake recovery services that want to scam your friend. There is nothing that can be done than your friend to forget about it, the coin's gone, and not reversible. So sorry for the loss.
Yes, this is the only way to recover the coin. But I will not suggest anyone to use any online coin/money recovery service if the servicer are not you relative or well know person. Most of the time these online money recovery service double scam with the victim. So it's not suggestive IMO.
So around 102,278.343762 XRP was scammer if I don't mistake. This a huge amount really. I can not understand who has such amount of crypto how they fall into these trap? Atleast they should have some basic knowledge about recent crypto scams. So sad.