There are several scammers out there. Do not go to any extraneous apps or websites. with them. This is not the end of my story. It got worse with someone attacking my online businesses & even attempting to access bank accounts ( a person in LA - This per my bank) For months I had to change passwords on bout 10 accounts at least 5 times per day. I had to shut down my online businesses for 3 months & lost revenue because they were trying to get into them as well. It was that bad. Eventually it stopped.
I still get 'visits', but no more trouble so far. Im sure my bank has records, but I didnt pursue it. There are several stories you can show her. His girlfriend would be the LAST person I would go to. These people are hackers. Make sure she heeds your warning & her online & bank accounts are fortified. Best of luck to you.