The friend who gave him the money probably did not understand the risk. I'm assuming nobody told him. If he did understand the risk, he would have most likely not given you the $.
You are responsible for his money, not the scammer.
If you guys sent the $ together as a team, it would be different.
You assume the risk, not the customer
When a source gets scammed by his suppliers, customers still hold the source responsible for there money.