He should not be able to do that without being your friend. Contact support.