Medium riskSocial Media Scams

Cloned Account Friend Request Scam

A scammer copies a real person's name and profile photo, then sends friend requests to that person's contacts and messages them asking for money, verification codes, or to click a link.

Quick verdict

Risk level
Medium risk
Scam type
Impersonation scam
Main red flag
A new friend request from someone you are already connected with, followed by an unusual request for money or codes.
What to do first
Do not accept or reply yet. Contact the real person through a number or channel you already trust to check whether it is really them.

What this scam usually looks like

A scammer copies a real person's name and profile photo, then sends friend requests to that person's contacts and messages them asking for money, verification codes, or to click a link.

Example message pattern

Example pattern — not a real report
Example pattern: 'Hi, my old account got locked so this is my new one. So sorry to ask, but I'm in a tight spot and need to borrow some money quickly. Can you help me out today?'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

Red flags to watch for

  • A duplicate friend request from someone already in your contacts
  • A new or recently created profile with very few posts or friends
  • An early move to a private message asking for money or a favour
  • A request for a verification or security code sent to your phone
  • A link to claim a prize, grant, or 'help' you did not ask about

What to do

  • Contact the real person through a phone number or channel you already trust
  • Check whether the profile is new and has copied photos from the genuine account
  • Report the cloned profile to the platform as impersonation
  • Warn your shared contacts so they do not fall for the same request

If you already clicked or replied

  • Do not enter login details or share any codes on the page that opened
  • If you typed your password, change it and turn on two-step verification
  • If you shared a verification code, secure the affected account right away
  • Watch any linked accounts or payment methods for unusual activity

What not to do

  • Do not send money or gift cards based on the message alone
  • Do not share verification or security codes with anyone
  • Do not assume the photo proves who you are talking to

Similar scams

High risk Social Media

Hacked Friend Help Scam

A message arrives from a friend's account asking for money, a verification code, or to click a link. In reality the friend's account has been taken over, and the scammer is using your trust in them to reach you.
High risk Social Media

Facebook Account Recovery Scam

This scam uses a hacked friend's account to ask you to be a 'recovery contact' or share a code, which actually hands your own account to the scammer.
High risk Social Media

Romance Scam DM

This scam builds an online romantic relationship through messages, then invents an emergency or investment to ask for money, while always avoiding meeting in person.

Frequently asked questions

How can a stranger use my friend's exact name and photo?
Profile photos and names are often public, so anyone can copy them to make a convincing duplicate. The copied details do not mean the account is really your friend.
Why would the real account suddenly be 'locked'?
Claiming the old account is locked is a common excuse to explain why a new profile is messaging you. It pressures you to act before you check with the genuine person.
They asked for a code that arrived on my phone. Why?
That code can be a password reset or login code for one of your own accounts. Sharing it can hand the scammer access, so genuine contacts will not ask for it.
How do I report a cloned profile?
Most platforms have a report option on the profile for impersonation or a fake account. You can also report it to your national anti-fraud centre.

Last reviewed: June 2026

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.