Got a supremely uninformative reply back of "Email me back at <email address>"
Yeah, scammer. Blocked.
I googled the email address and it's already listed as being for a known 419 scammer. I emailed the person listed as our mutual friend on FB and told him that if he did know the person, he should tell her she's been hacked. If he doesn't know the person, he should defriend her because it's a scammer's account.