How did your friend find this VE session? What VEC staffed it? Where was it announced/advertised? Who were the examiners?
I suspect none of this info is known. I suspect somebody pulled a fast one on your friend. Rare, but it happens. If any of the above info is known, I would send the info to FCC. If the VEC is known, send the info to them, too. (ARRL is not the only VEC).
As others have noted, an accredited VE team is ALWAYS at least 3 VEs. If there was only one "examiner". it wasn't a for-real exam.
Also, the non-issuance of a CSCE proves that either your friend did not really pass (unlikely) OR that he was scammed (more likely).
The "only take cash" may be a red flag. How much did it cost?
Meanwhile, your friends should find a real VE session and try again.
73 de Jim, N2EY