Friends account hacked?

So my friend got on and messaged me talking about getting a free skin and sent me a link. I clicked it, it looked fishy so i exited. Then he said "did it work" so I just said " na didn't work for me." Then he sends me a second link and says " oh its two steps." I am full on suspicious so i tell him "oh didn't work either." Then I tried to change the subject and he replied "Just try the link"

Is there a procedure to report this? This is one of the first friends i ever made on league and i was talking to him normally early today. Just worried any advice.