You only need to change it by email if you don't have access to the PS3 the account was created on, or in some case is at least active on that PS3 (with content still stored on it). I had to change my password on the spot with some accounts, but via email with others. Your friend would be smart to change his email in case he's not so lucky next time.
Oh I see, and yeah ill tell him to put in a real email. thanks.