Medium riskSocial Media

Cloned Account Friend Request Scam

A scammer copies a real person's name and profile photo, then sends friend requests to that person's contacts and messages them asking for money, verification codes, or to click a link.

Quick verdict

Risk level
Medium risk
Scam type
Impersonation scam
Main red flag
A new friend request from someone you are already connected with, followed by an unusual request for money or codes.
What to do first
Do not accept or reply yet. Contact the real person through a number or channel you already trust to check whether it is really them.

What to know first

A scammer copies a real person's name and profile photo, then sends friend requests to that person's contacts and messages them asking for money, verification codes, or to click a link.

Social media scams spread through direct messages, ads, hacked friends' accounts, and fake profiles. They range from account-takeover phishing and fake giveaways to investment and romance fraud, exploiting the trust and reach of your own network.

The core pattern to watch for is clear: A new friend request from someone you are already connected with, followed by an unusual request for money or codes. Do not accept or reply yet. Contact the real person through a number or channel you already trust to check whether it is really them.

Related tricks worth knowing: the Hacked Friend Help Scam and the Facebook Account Recovery Scam. For the wider picture, browse the Social Media Scams guides or run the message through our scam checker.

Scam statistics

$1.4B
reported lost to fraud that began on social media in the US in 2023
Top channel
social media was among the most common ways scams reached people in 2023

Tell-tale red flags

  • A duplicate friend request from someone already in your contacts
  • A new or recently created profile with very few posts or friends
  • An early move to a private message asking for money or a favour
  • A request for a verification or security code sent to your phone
  • A link to claim a prize, grant, or 'help' you did not ask about

Staying safe

  • Contact the real person through a phone number or channel you already trust
  • Check whether the profile is new and has copied photos from the genuine account
  • Report the cloned profile to the platform as impersonation
  • Warn your shared contacts so they do not fall for the same request

How it usually reads

Example pattern, not a real report
Example pattern: 'Hi, my old account got locked so this is my new one. So sorry to ask, but I'm in a tight spot and need to borrow some money quickly. Can you help me out today?'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What to notice: A new friend request from someone you are already connected with, followed by an unusual request for money or codes.

Steps if you already acted

  • Do not enter login details or share any codes on the page that opened
  • If you typed your password, change it and turn on two-step verification
  • If you shared a verification code, secure the affected account right away
  • Watch any linked accounts or payment methods for unusual activity

Common mistakes

  • Do not send money or gift cards based on the message alone
  • Do not share verification or security codes with anyone
  • Do not assume the photo proves who you are talking to

Scams like this one

Your questions answered

How can a stranger use my friend's exact name and photo?
Profile photos and names are often public, so anyone can copy them to make a convincing duplicate. The copied details do not mean the account is really your friend.
Why would the real account suddenly be 'locked'?
Claiming the old account is locked is a common excuse to explain why a new profile is messaging you. It pressures you to act before you check with the genuine person.
They asked for a code that arrived on my phone. Why?
That code can be a password reset or login code for one of your own accounts. Sharing it can hand the scammer access, so genuine contacts will not ask for it.
How do I report a cloned profile?
Most platforms have a report option on the profile for impersonation or a fake account. You can also report it to your national anti-fraud centre.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.