The comments on the hacking put an interesting spin on things. It's quite possible someone sent him a message from the actual Ms Milani's facebook or email address redirecting him to another account "she" uses privately.
He's still a fool for agreeing to carry the drugs but at least that would explain how he might have not rumbled that he wasn't talking to the real person. I mean, if you meet someone on a dating site claiming to be her, you'd probably be all "yeah, yeah" but if you then got a confirmation message from her official site on facebook.....