I feel sorry for the OP (and friend), but this has nothing to do with BA, so shouldn't really have been posted here.
From my own (limited) dealings with ESTA, the fact that he was sent an email at all is amazing. Just a shame they didn't send it a few weeks ago. Hopefully the OPs friend manages to get his passport on Monday from Victoria.