I would think it is company's problem.

As far as your friend can give the money back when being required, there should be no problem for her. (I am not a lawyer. I could be wrong.) However, when it is time to income tax, the situation can be tricky. Will your friend pay IRS for this part of income or not?