If she could not log in her account, she could not see that mail, and she never said that she is having her account locked
Some years ago these were nicknamed bulgarian spam... play on the fear to get some bugs
To be said, it is good to have complex password, and a keepass to store them