All guidesPrivacy and security
Privacy and security

Facebook flags a friend request, or someone I already know adds me again. What should I check?

A ClearRules guidePublished: How we prepare guides

The short answer

Leave the request pending while you check who sent it. A warning is a reason to investigate, not a verdict. A familiar name or photograph is also insufficient proof of identity.

What this answer is based on

What to do

Use a phone number or conversation you already trusted before the request arrived. Do not use a new number supplied by the unverified profile to verify that same profile.

  1. Before responding, note the exact profile link, name and request date. If there is a suspicious message, preserve its relevant text privately. Avoid posting accusations or other people's personal details.
  2. Open Facebook yourself and inspect the request there. Do not sign in through a security-check link sent by the profile. Establish whether this is a friend request, a Page invitation or a message: this guide covers friend requests.
  3. If Facebook shows an alert, read the reason it actually gives. Do not infer an account ban, a verified scam or a restriction on your own account from the warning alone.
  4. Contact the supposed sender through an already trusted route. Ask whether this exact profile is theirs and whether they sent this request. A second account may be genuine; wait for confirmation rather than relying on the picture or mutual friends.
  5. If you cannot establish who it is, leave the request unanswered or use the rejection control shown. If contact is unwanted, consider blocking. If there is evidence of impersonation or fraud, use the relevant reporting flow and accurately describe what happened.
  6. Check the confirmation for the action you chose. If you already accepted, review the connection and the audience of sensitive posts; use the linked privacy guide. Do not assume changing the connection retracts information already seen or copied.
  7. If controls fail, stop interacting and use the official in-app help or problem-reporting route. Record the error and app version without sharing passwords. If you already gave a login code or password away, move to the linked account-security guide; rejecting a request does not secure a compromised account.

The situation

Illustrative example

Hypothetical example: A second profile using your colleague's name adds you, then asks for a code to help recover an account. You have not confirmed that your colleague controls that profile.

The situation and an improvement

What causes the issue

Accept because the name is familiar, then follow the new profile's recovery instructions.

A more accurate version

Verify the exact profile through an existing trusted contact before deciding about the request.

More examples

A real friend has moved abroad

An alert appears, but you know your friend has recently relocated.

What to do

Verify the profile through your existing contact. The alert is a prompt to check, not a reason to accuse your friend.

There is no warning

A duplicate profile asks for an urgent loan without triggering an alert.

What to do

Keep the request on hold and contact your friend independently. The absence of an alert does not verify the request.

What this answer is based on

Meta · Facebook suspicious friend-request warning testabout.fb.com
Guide based on Meta’s materialReview details

Source reviewed:

We read the official source listed for this topic. Other Meta rules are reviewed separately.

Primary source reread: . This does not mean every supplementary source, translation or app screen was rechecked.

Meta’s 11 March 2026 announcement was read on 17 October 2026. It describes a test of Facebook friend-request warnings, not universal availability or a finding that a particular person committed fraud. The checks and examples below are ClearRules advice; no live account or request was tested.

Material published: March 11, 2026

Report an inaccuracy

Include the guide link, language and wording that needs checking. Add an official source link if you have one. Do not send passwords, login codes or photos of identity documents.

Examples are made up to explain the guidance. Meta decides individual account and content cases.

Sources and related topicsPolicy Graph · Demo in development