My guess is that they are using VPN, maybe the free one from cloudflare (1.1.1.1) on their phone and don’t know it.