I have used GPUs and RPUs and miles for friends and family, and not one of them ever received a call, but if United did call them they could certainly answer any questions United may ask them about me (the person providing the upgrade).
Agree with @
findark there is a potential fraud issue that United is investigating if they received an unusual call, assuming it was United that called your friend.