Everything that you've described so far matches with what scammers do. They sent a fake job offer, retrieved the passport and are now asking for money to send the "stamped" passport back. They may find other ways to trick your friend into sending them more money for "visa processing". It's up to your friend if he wants to keep loosing money.