User is saying their account is hacked

My guess is that they are using VPN, maybe the free one from cloudflare (1.1.1.1) on their phone and don’t know it.