I would also have them test with a different browser and then a different device. For example if it happens only on Safari but not Chrome, it’s something in their browser.
If it happens on all browsers on the device, but works from a different device (such as a cell phone), it’s something installed on the device (malware, some sort of VPN or something else local to the machine).