Do I understand this as a Phishing email?
An acquaintance of mine says they were notified by a
current FB Friend (of my acquaintance ) that the
current Friend got an email request for her (the
current Friend) to
become a Friend. Is that clear enough? The point is, someone used my acquaintance's name asking that someone become her Friend. But the recipient is already a Friend of my acquaintance.
My acquaintance obviously did not send the email. I contend that the email is nothing more than a Phishing email that will not take anyone to FB. I suggested she simply change her password and be done with it.
Unfortunately, the person reporting this, claims my acquaintance's account has been hacked. That's always possible, of course. After all, it is FB.
The reporter then asks that my acquaintance notify "all her friends to ignore any emails asking them to become a friend". Although it might prevent a few naive 'friends' from clicking the link in the email, it will
not help the probably thousands of other,
non-friends, who will be getting the same email, totally without my acquaintance's knowledge.
I told my acquaintance to send a message to anyone she wanted but not to worry about people who click on links in emails without using their brain. She is not responsible for others stupidity or ignorance. If she wants to attempt to teach safe surfing to the rest of the world, she will be very busy for the rest of her life...
Bottom line, no one needs to "hack" a FB account in order to send a Phishing email supposedly asking for the recipient to become a "friend". Naturally, the original Phishing email is not available.