Cloning someone's Facebook account and getting their friends to "friend" the fake account is a common but avoidable scam.