Maybe someone she works with (because this is usually organized crime) works in a store your friend goes to, memorized her name from her ID or card, looked her up on social media, looked at her tagged photos, figured out who is related to her, maybe her parents have posted about the medications they take or symptoms they experience, and so on. It is a lot easier and more common than you think. But even if she really did just magically know everything, It’s gross that she is scaring your friend for money. I’m sure there are honest people she could seek out help from. These scammers count on the idea that someone will think “oh a stranger just came up to me and said all this, it must be divine intervention”