How did this guy scam me?

He minted himself new tokens, made the token unsellable even tho in the contract itself there are no functions to mint new tokens and make them unsellable? Did he deploy a fake contract somehow? Never seen anything like this before.