Getting a hacked Pokemon through a transfer is really based on what website/app to make the Pokemon. Since your Pinsir made it into Pokemon Bank without any complications, your friend must have made the Pinsir with a website/app that ensures creations can be put on XY; an example would be Pokegen. But the important thing is, you now have a godly Pinsir to use in Gen 6.