A fictional example: the second profile
Jonas receives a request displaying a colleague’s photograph. It names her employer and shows several mutual contacts. Soon afterwards, a message mentions a supposed prize draw. Instead of replying in the new conversation, Jonas calls the number he already has for his colleague. She has not created a new profile. He reports the impersonating account through the platform and explains to her what he received.
Change the contact route deliberately
Asking inside the suspicious conversation reaches the same unknown sender and does not provide independent verification. Use a previously known number, speak in person or choose another reliably established route. Ask neutrally: “Did you just send me a request from a new profile?” If you cannot reach the person, the request can wait. Politeness does not require accepting immediately or treating an urgent explanation as sufficient confirmation.
Put profile details in perspective
A copied photograph can look convincing. Employment details and interests may also be publicly available. Mutual contacts might have accepted the request without checking it themselves. Conversely, a new or sparsely populated profile is not automatically fraudulent. The useful step is to verify this particular request independently. An image search or account date may raise further questions, but neither replaces checking with the actual person through a route chosen separately.
Keep the pause when a request becomes a demand
Knowing the genuine account owner does not make every later message safe: a real account can be taken over. Independently check unusual requests for money, investment suggestions and requests to forward a code. Access codes do not belong in a contact chat. If you only accepted the invitation, distinguish that from entering a password or making a payment. What to do next depends on what actually happened, not on how embarrassed you feel.
- Do not open links offered as supposed proof of identity.
- Do not send codes, identity documents or money to verify a contact.
- Check unusual demands even when they come from an existing account.
Report clearly and warn without spreading the problem
When impersonation is confirmed, you can report and block the profile. Consult the platform’s current help for the relevant function. Tell the affected person through a safe route; a short description is often enough. Avoid circulating unnecessary personal information or active scam links. If money or credentials are involved, contact the payment provider or account support promptly using official routes you open independently. Reporting does not guarantee immediate removal or recovery of funds.
Your checklist
The checkboxes are for your own reference. No entries are sent to us. To keep a copy, print the page or save it as a PDF using your browser menu.
Common questions
Is every duplicate request a scam?
No. People change accounts or lose access. Independent checking is appropriate; publicly accusing someone merely because a second profile exists is not.
The message knows personal details. Is that enough?
No. Details can come from past publications or a compromised account. Use the separate contact route rather than treating familiarity as proof.
Must I reset my phone after accepting?
Accepting alone does not establish that this is needed. Check whether you entered credentials, installed anything or sent money, then obtain help suited to those actions.
Sources and further information
Primary sources from public authorities, consumer organisations and providers. A source may be in another language; follow the guidance that applies to your service and where you live.
- FTC: That friend request could be from a scammerSource review date:
- BACS: Wenn der beste Freund plötzlich Krypto-Tipps gibt — Identitätsdiebstahl auf Social MediaSource review date:
- Meta Safety Center: Scam preventionSource review date:
