This is known as the stranded traveller scam and has been around for some time. I had one about 6 months ago. See this The spammers/scammers/phishers have probably obtained details by hacking an account somewhere. It could be Facebook, hotmail or an e-mail account or company website.
I doubt that your e-mail address is compromised. Certainly the person you know need to run malware and virus scans and change their passwords. For greater security you could change your e-mail password.