What scam and how was your friend contacted? If the PC is off line then uninstall using programs and features (add/remove). Scan with the security programs available before re-connecting to your ISP. So long as it's the CC details involved and that is canceled then I can see no problem.
Surface Pro (2017) vs Surface Pro 4