In that case, don't touch the money - put it in an interest-earning account. They will have to prove that they have overpaid him. If they write saying, oh we've overpaid him by £x, ask them to provide full details and evidence that he is not entitled to this money.