He then asked if she had a computer or iPad available (I believe this is the part when they generally ask for accounts/passwords), and when she said that she did not, he gave her step-by-step instructions for activating 'Access Within Apps' on the Control Center on her phone (Settings>Control Center>Access Within Apps). The caller followed the usual script: there's been a security breach, we think your account has been affected, do you know anyone in Ohio who has accessed your accounts, etc.
She wasn't aware of the scam and believed the call was official when caller ID showed Apple's contact information, so she took the call. IPhone Phishing Scam Involving Control Center Settings? My mother-in-law was called by one of the scammers who spoofs the Apple tech support number.