The Friend Request From Someone You’re Already Friends With

There's a particular moment of confusion that most Facebook users have experienced at least once. You open your notifications and see a friend request from someone whose name you clearly recognize, maybe a cousin, a colleague, or a close friend you've known for years. The problem? them.It feels like a glitch at first. Maybe they deleted their account and started fresh. Maybe the app is acting up. It's only natural to give it the benefit of the doubt, and that hesitation is exactly what scammers count on.

It's Not a Glitch – It's a Clone (Image Credits: Pexels)

The Facebook cloned account scam doesn't usually involve hacking your account at all. Instead, scammers create a brand-new profile using your name, photos, and publicly available information.

They copy your profile picture, bio details, and sometimes even past posts to make the fake account look real. Then they send friend requests to people on your friend list. Because the request appears to come from you, many people accept it without thinking.

Here's the key detail most people don't know: Facebook doesn't allow duplicate friend requests from the same account. If someone receives a new request "from you," it's coming from a completely different account pretending to be you.

How Common Is This, Really? (Image Credits: Pexels)

In the fourth quarter of 2025 alone, Facebook took action on 1.1 billion fake accounts, up from 698 million in the previous quarter. That's not a niche problem. That's a staggering volume of fraudulent profiles, many of which exist specifically to impersonate real people.

The FTC reported $1.9 billion in social media scam losses in 2024 alone, an 870% increase since 2019. These aren't abstract statistics. Behind every number is someone who trusted a familiar name and paid a real price for it.

One in three social media users experienced a security incident last year, and nearly three quarters of victims found their other platforms compromised once a single account was breached.

Why Your Friends Are the Target, Not You (Image Credits: Pexels)

Once the scammer has several of the original account holder's friends on the fake account's friends list, there are countless ways those people can be scammed, because people tend to trust their friends.

The impersonator sends friend or follow requests to the victim's existing contacts. Early acceptance is critical, since it provides social proof that lures other contacts into trusting the fake account.

Impersonators can use the fake profile to request personal information from your contacts, direct them to phishing pages, or gather details that support identity-theft attempts. Attackers can also send urgent or emotional messages to your friends and family, hoping to convince someone to send money.

The Scam Within the Scam: Urgency as a Weapon (Image Credits: Unsplash)

Scammers frequently initiate their schemes by posing as a friend through a cloned account. They may claim that they have received a duplicate friend request from you, creating the illusion that your account has been compromised. This tactic is designed to instill a sense of urgency and panic, prompting you to act without thinking.

Roughly a third of social media scams now incorporate "Urgent Help" requests from cloned accounts. The format varies, but the goal is always the same: get you moving fast enough that you skip the part where you stop and think.

In one documented case reported by Fox News in 2024, a scammer masquerading as a friend via a cloned account provided a phone number for a supposed "Facebook official." This is a classic maneuver intended to gain trust and lower defenses. The scammer provided the phone number as part of a deceptive strategy, claiming it could help resolve an alleged security issue.

The Chain Message Hoax That Piggybacks on Real Fear (Image Credits: Unsplash)

Facebook is a breeding ground for hacks and scams, but there's one warning circulating through Messenger that deserves extra scrutiny. The Facebook "double friend request" hack warning is actually a hoax, and law enforcement officials have urged users to stop spreading misinformation about it.

The chain message starts by saying a friend received another request from you, and then urges you to check your account and forward the warning to other people on your friends list, even if you haven't received duplicate friend requests from them yet.

If you received this message from a friend, they likely never got a second friend request from you at all. They simply passed along the warning because the message told them to. The hoax is effective because it latches onto a real threat, account cloning, even when no actual cloning has occurred.

A Newer Trick: The "Alt Profile" Excuse (Image Credits: Unsplash)

One newer tactic to watch for is cloners exploiting Facebook's additional profiles feature, which lets users create up to four sub-profiles per account. A scammer could pose as your "professional" or "hobby" alt-profile, giving a plausible reason for a duplicate friend request. If a friend receives a request from what appears to be a secondary profile of yours, they're more likely to accept it without question.

This is a meaningful shift in how these scams operate. Earlier cloning attempts were fairly easy to dismiss because there was no logical reason someone would send a second request. The alt-profile cover story changes that calculus.

It's worth telling your closest contacts now, before anything happens, that you won't be creating secondary profiles. A quick message can close the door on this particular trick entirely.

Why You Might Not Even Know You've Been Cloned (Visual Content, Flickr, CC BY 2.0)

If your account is cloned, chances are you won't even know. Scammers often block the person they're impersonating. Changing your password won't help. It's identity theft using information that's already public.

If you want to be proactive, you can search for cloned versions of your Facebook account yourself. Type your own name into Facebook's search bar and look for profiles that use your photos or personal details. You can also ask a trusted contact to run the same search. Some cloned profiles block the real person to prevent you from spotting the duplicate.

The Warning Signs to Watch For (Image Credits: Unsplash)

If you receive a friend request from someone you are already connected with on Facebook, it may be a sign of account cloning. Other warning signs include a newly created profile with very little activity or content, mutual friends reporting they received a similar request, and messages from the cloned account asking for money, personal details, or sensitive information.

Most cloned accounts are thin. They have a profile picture and maybe a cover photo, but little else. No tagged memories, no old posts, no timeline activity going back years. That emptiness is the tell.

If you receive a friend request from someone you are already friends with, search your friend list to see if you are still friends with that person. If you are, you have just received a friend request from a duplicate and probably fake Facebook account.

How to Lock Down Your Profile Before It Happens (Image Credits: Unsplash)

The key is hiding your Facebook friends list. Anyone who clones your account will use your public friends list as a list of targets. If your friends list is private, it's much harder for them to come up with the list of your friends and family.

Limit who can send you friend requests. The default is "everyone," but switching it to friends of friends can stop fakes before they start. It takes about thirty seconds to change and can meaningfully reduce your exposure.

Enabling two-factor authentication through Meta's Accounts Center and reviewing past public posts that expose personal data or images is also advisable. On Facebook specifically, locking your profile where available and hiding your friend list are the most critical steps.

What to Do If Your Account Has Already Been Cloned (Image Credits: Pexels)

Submit the official impersonation form for the platform and attach clear photographic ID. Ask several trusted contacts to report the counterfeit profile under "Pretending to be someone." Instruct those contacts to report individual scam messages or posts, not merely the profile. Publish a short notice, visible to your network only, warning friends not to accept new requests.

If you receive a friend request from someone who already is a Facebook friend of yours, contact the friend to let them know that their Facebook account has been cloned so they can report it to Facebook and get the phony, cloned account taken down.

Meta prioritises first-party confirmation. If the real person does not file the dedicated "Impostor Account" form and attach a government-issued ID that matches the display name, reviewers may conclude they lack definitive proof of impersonation. Filing correctly, with documentation, makes the process significantly faster.

A duplicate friend request from someone you already know sounds like a minor annoyance. In practice, it's often the first visible sign of a scam that's already targeting the people closest to you. The mechanics are simple, but the social damage, financial loss, and erosion of digital trust can be real.

The good news is that awareness is genuinely protective here. Understanding what account cloning actually is, as distinct from hacking, means you're far less likely to panic, comply, or accidentally help spread a chain-message hoax that does more harm than good.

The next time that strange friend request appears, don't click accept and don't forward a warning to everyone you know. Just reach out to your friend directly, through the account you already trust, and ask a simple question. That one pause is usually all it takes.

AI Disclaimer: This article was created with the assistance of AI tools and reviewed by a human editor.

The post The Friend Request From Someone You're Already Friends With appeared first on The Garden Magazine.