Op did you edited the address out of here as I can see there is no address from the op how do we know the address the scammer uses to scam your friends mom, although from your explanation it seems that the scammer uses mixer after receiving the money he mixed it out to different output address so that the transactions will be hard to trace from his end. But if i must know how did your friend mom suddenly develop passion and trust for unknown person over the internet and to send bitcoin to him without knowing the risk associated with sending bitcoin to them or why did she go downloading unknown app without doing her findings to start using it, don't you know scammers often uses many app to defraud people around to collect their hand earn money from them?
You can always see the original content [and, thus, the address] from
ninjastic.
It was removed from the post as per an instruction to
"keep things under the radar", though there are other ways to obscure the address from being indexed aside from removing it from post. The fund has been moving, though, so I don't think it's necessary to keep it discreet.
The originating
address was:
bc1qq0aheutystzzw4vc0kn5fkuvnp54ju3yckpmww
It moved with this
hash and now the wallet is empty:
d73da0ca31dae39a2e7c1c5807d38c36786492d5bb5b630c847202338cace372