Chances are, she/he probably had a event Pikachu from another game and then transferred it. Or as J. Fuseon (Amalgeon) said,
You can get surfing Pikachu at HeaHea City's surf shop once you master each island's Mantine Surf challenge.
I hope I helped!
Source: Knowledge and J. Fuseon (Amalgeon)