The last 4 digits of his SSN. The last 4 are often used as a default password for financial accounts and to verify identity over the phone. Along with the date of birth (dob). It's a bad idea that it's used so much for security, but it is. It's a good thing for scammers to have and asking for it and the dob in this context is a huge red flag.