alright , that can be a bot check security thing ... but via a third party company , not X team ( i hate all of this data gathering they do)
can he try this :
- clear his browser cookies and history .. close it and go in incognito mode .. reopen X website , try to log in
- open x on phone, if he dont have app , install it . log in and try to update birthday date and personal info and password