Evo, have done a check and Nat West have a multi stage login process that includes a challenge response section designed to defeat a key logger.
Therefore I think there has to be more to your intial post than meets the eye.
Has your friend been the victim of a phishing scam?