He probably had ID in his room (or, if in America one can check in without an ID, he could have a credit card with his name), and the staff should have verified

He probably had ID in his room (or, if in America one can check in without an ID, he could have a credit card with his name), and the staff should have verified it instead of giving a key to a random stranger.