User is saying their account is hacked

they said they use one laptop and the IP they gave me is the same location they ususally use

their main concern, and they keep telling me over and over, is that its showing it as being logged in when they are not logged in