He's a scam.
As a short, dumpy, plain, 40-something year old myself, my 100% experience has been that men looking for love online believe that they deserve a perfect Barbie. To begin with a guy that is even remotely good looking and that has done all that would not be searching for love online unless there was something freaky wrong with him. Women in real life would be throwing themselves at him. If for some strange reason he was looking online, he would not be talking to a dumpy, plain looking 39 year old woman unless he wants something. He would be tracking the 20-something year old hotties. If he is legit he has a lot of options to pick from and he would not be picking the older woman.
Now, this is not to say that your friend won't find some guy to love her. You say she is beautiful on the inside. In real life it is possible that some guy will realize this and will snatch her up and shower her with the love and affection that she deserves. But in the online world it doesn't happen that way. This guy is scamming her and she needs to run far, far away.