1. I got told many years ago, that when you get that crazily bad emails, where it claims to be from some official source, but there are spelling mistakes, the return email address is obviously wrong, grammer is terrible, etc. the sort where it is so completely obviously it is a scam - often this is done on purpose, they aren't intereseting >99% of people who can spot a scam, they are interested in the 2. Separately t…
Another danger is that with the extended access to your profile, they could get enough content to clone you convincingly, and then you get the scam where all your friends receive a duplicate friend request from "you", and the new profile tries to sell them on some scam.