So I’m assuming this account was created in the last few years? In which case it will be linked to a Google account.
I’d suggest using this https://support.google.com/accounts/troubleshooter/2402620
Does he have any idea what email address he used to sign up? As you may not have access to it...