Friend Requests or Privacy Risks? How to Vet Who You Connect With

A friend request is a small question: may I see your world? Most are innocent. Old classmates, coworkers, relatives and neighbors reconnect this way every day. But the same mechanism is used by people who are not who they claim to be. Scammers build fake profiles to gain trust before asking for money. Impersonators clone real accounts to contact the victim’s friends. Data harvesters collect profile information to feed marketing lists and people-search databases. And occasionally, a request comes from a person who has fixated on you. This guide explains the types of risky requests, how to vet them, what accepting does and does not give someone, and how to protect your presence without becoming paranoid. For the bigger context, see how strangers invade your privacy.

1. Why friend requests matter for privacy

Accepting a request is a permission. Depending on your settings, it can give the requester access to:

Your posts and photos that are visible to friends.
Your friends list, which reveals relationships.
Your birthday, hometown, workplace and other profile details.
The ability to message you without filtering.
Tags and mentions that expose your location.

A fake friend becomes a window into your life and a bridge to your contacts. That is why vetting matters.

2. Common types of risky requests

Fake profiles built for romance or investment scams

These accounts use attractive photos and a story that seems plausible. After days or weeks of friendly messages, they move to a request for money, an “investment opportunity” or personal information.

Cloned accounts

A scammer copies a real person’s name and public photos, creates a new account and sends requests to the person’s friends. If a friend accepts, the scammer messages them with an urgent request for money or a link.

Data harvesters

Accounts that send mass requests to collect profile data. They may use stolen photos and generic bios.

Impersonators of businesses or officials

Fake pages or profiles claiming to be a bank, a support agent or a government office. They contact you with “problems” that require action.

Obsessive or hostile individuals

People with whom you have conflicts, or who have fixated on you, may use alternate accounts to get around blocks. See defending against online stalking.

Recruiters and job scammers

Fake recruiters ask for documents or payment. Our article on LinkedIn privacy covers a related pattern.

Curious what’s already out there? Wiperts’ 100% Free Diagnosis shows which data brokers are listing your name, home address and phone number. Check your exposure free — it takes about a minute.

3. A checklist for vetting requests

Check	Good sign	Warning sign
Account age	Several years of activity	Created recently
Profile photos	Varied, natural	Single glamour shot, stock-like
Posts	Mix of personal content and interactions	None, or generic quotes
Mutual friends	Real people you know	None, or many unknown
Friends list	Plausible size	Thousands of random contacts
Details	Consistent location and history	Contradictory or vague
Messages	Normal conversation	Fast flattery, urgency, requests for money
Name	Matches photos and details	Different names in tags and bio

Do a reverse check on the profile photo using a search tool. If the photo appears under other names, the account is likely fake.

4. Step-by-step: handling a request

Pause

Do not accept immediately. Take a minute to look at the profile.

Verify with mutual friends

Ask a mutual friend whether they know the person. For a request from someone claiming to be a friend, contact the friend another way.

Check for cloned accounts

If you are already friends with the person, a second request from the same name is a red flag. Message them on the original account or by phone.

Decline and report suspicious accounts

Use the platform’s report tool for fake profiles and impersonation. Block the account.

Do not click links or send money

Even if you accept, treat links and requests for money as suspicious. Verify on a different channel.

5. Settings that reduce risk

Restrict who can send requests

Limit requests to friends of friends where available, or filter requests from unknown people.

Hide your friends list

Prevent others from seeing your connections, which are used to clone and impersonate. See how to use Facebook privacy settings and managing privacy on Facebook.

Filter message requests

Send messages from strangers to a separate folder and do not open links in them.

Limit public profile details

Remove birth date, phone, address and workplace from public view. A fake contact cannot misuse what is not visible.

Review tags

Require approval before tags appear on your profile, which reduces location leaks.

Use two-factor authentication

Protect your account from takeover, which could turn your profile into a scam channel.

6. If your account is cloned

Collect the profile link of the clone and screenshots.
Report it to the platform as impersonation.
Warn your friends through another channel and on your real profile.
Ask friends to report the clone.
Tighten privacy: hide the friends list and restrict public photos.
Check that your real account has not been compromised.

If friends sent money to a clone, they should contact their payment provider immediately and report the scam at reportfraud.ftc.gov. For online crimes, file a report at ic3.gov.

7. What a fake contact can learn

Even a harmless-seeming fake friend can gather details that feed bigger harm: your employer, hometown and family names; your habits from posts; and your friends from tags. Combined with people-search information, such as a home address, a bad actor can build a convincing impersonation or find you in person. That is why removing broker listings is part of social media safety. Verified opt-out pages include Spokeo, the PeopleConnect suppression center and That’s Them.

8. Teens and families

Young people receive requests from strangers, older users and accounts pretending to be peers. Set accounts to private, accept only people they know in person, and talk about what to do if someone asks for photos or personal information. Our guide on online safety for teens can help guide the conversation. For older relatives, discuss romance scams and agree on a code word to verify emergency requests.

9. Verified accounts and badges

Badges can help, but they are not guarantees. Platforms have changed how verification works, and some badges can be purchased, so a badge is not proof of identity on its own. Look at the whole account. Read how verified accounts protect you online for more on what verification does and does not mean.

10. Timeline: a friend-request tune-up

When	Action
Today	Restrict requests and hide your friends list
This week	Review your current friends and remove unknown accounts
This month	Audit tags, public details and two-factor authentication
Each quarter	Repeat the audit

11. Handling pressure from people you do know

Not every awkward request comes from a stranger. Coworkers, extended family and acquaintances may send requests that are hard to decline. You do not owe anyone access to your personal profile. A polite answer works: “I keep my personal profile for close friends and family, but we are connected on the professional network.” Use lists or audience controls to share selectively, so a new contact sees only what you choose. For managers and colleagues, a professional profile is usually a better fit than a personal one.

12. Group chats, communities and shared spaces

Groups can be a quieter path for strangers. Anyone who joins a large group can often see members’ names, profile photos and comments, and may be able to message members directly. Before joining, check who runs the group, how members are vetted and what the privacy settings are. Leave groups that become spammy, and be careful about sharing personal details in public communities. In private groups, remember that screenshots travel.

13. When a request becomes harassment

If someone keeps sending requests from new accounts after you have blocked them, treat it as harassment. Keep a log of dates, usernames and screenshots. Report each account, tighten your privacy settings and talk to someone you trust. If the behavior includes threats, references to your location or repeated unwanted contact, contact local police. The Justice Department explains stalking at justice.gov/ovw/stalking, and the National Domestic Violence Hotline can help with safety planning at 1-800-799-7233.

14. Three scenarios and what to do

Scenario 1: A stranger with many mutual friends sends a request. Ask one of the mutual friends before accepting. Many fake accounts add friends of friends to look credible.

Scenario 2: A friend asks for urgent money by message. Call them. Their account may be hacked or cloned.

Scenario 3: An ex-partner creates a new account to contact you. Block, report, document and review your privacy settings. If you feel unsafe, contact police and call the National Domestic Violence Hotline at 1-800-799-7233.

15. Myths and facts

Myth	Fact
Only the careless fall for fake profiles	Skilled scammers fool many people
A mutual friend means it is safe	Fake accounts add friends of friends
Private accounts are immune	Accepting a request grants access
A badge means trustworthy	Badges vary in meaning
Reporting does nothing	Reports remove many fake accounts

16. Common mistakes

Accepting requests to be polite.
Keeping a public friends list.
Moving conversations off the platform quickly.
Sending money to someone not met in person.
Ignoring clone warnings.

17. Questions to ask yourself

Do I know this person in real life? What would they see if I accepted? Would I recognize a clone of my own account? Who in my life is most vulnerable to a scam message from me? Prepare them.

18. How Wiperts fits

Social settings reduce what fake contacts can see on the platform. Wiperts reduces what they can find elsewhere. It scans more than 100 data brokers and people-search sites for your address, phone and relatives, submits removal requests, removes personal results from Google and Bing, blurs your home on maps and monitors for returning profiles. Start with the free diagnosis.

100% Free Diagnosis: Check Your Exposure

Find out what data brokers have on you. Enter your details in the free scanner on the Wiperts homepage:

First Name
Last Name
Select State
Email Address
Website

Scan Databases Now — no payment is needed to see your exposure report.

19. Key takeaways

Friend requests can come from fake profiles, clones and data harvesters.
Vet requests by checking account age, photos, mutual friends and behavior.
Restrict requests, hide your friends list and limit public details.
Remove broker listings so fake contacts cannot connect your profile to your home.

Pick the Wiperts plan that fits your household

Plan	Covers	One-time deep scrub	Then
Individual	1 person	$89	$14/month
Couples (most popular)	2 people	$149	$24/month
Family	Up to 4 people	$199	$39/month

Every plan includes removal of your name, date of birth, salary, home address and phone number from 100+ data brokers and people-search sites, Google and Bing search-result removal, home blurring on maps, and 24/7 monitoring that re-removes your data if it reappears. See plans and start your removal

20. Frequently Asked Questions

Should I accept friend requests from people I do not know?

Generally no. Unknown requests can come from fake profiles, scammers or people harvesting information.

What is a cloned account?

A fake profile that copies a real person’s name and photos to contact their friends, often to run scams.

How can I tell a fake profile?

Look for a new account, few or odd posts, stock-style photos, mismatched details, no real mutual friends and quick requests for money or personal information.

What do I do if my account is cloned?

Report the clone to the platform, warn your friends through another channel and tighten your own privacy settings.

Can a friend request be dangerous by itself?

Accepting can give the account access to your friends list and posts, and you may click links in follow-up messages that lead to scams.

How can I limit who contacts me?

Restrict friend requests to friends of friends, hide your friends list and set messages from non-friends to filtered.

Sources

Ready to erase your footprint?

Stop letting data brokers profit from your personal life. Start your removal today.

Start Removing