No, they are not all fake. Plenty of unfamiliar invitations come from real people who read one of your posts, work in your field, or are job hunting and casting wide. The fake LinkedIn connection requests sitting among them are easy to separate once you understand what they want, which is rarely you personally. They want a copy of your professional network. Accepting one does cost you something real: contact details you may not realise are visible to first-degree connections, a mutual connection badge that makes the next request look legitimate to your colleagues, engagement signals from accounts that behave nothing like your actual audience, and a follower number that stops telling you anything useful. None of it is fatal. All of it is avoidable with a five second check before you tap accept.
Table of Contents
What the harvesting accounts are actually after
Start with the motive, because it explains every tell that follows. A profile that connects with five hundred employees of one large company ends up holding a usable map of that company. Who reports to whom. Which teams are hiring. Who joined last month and is still learning the internal tools. That map is the product. It gets sold, or it gets used to write a message that names your real manager and your real project, which is a different class of phishing from the ones you delete without thinking.
You are a node on that map. Your job title, your employer and your tenure were the only things that qualified you. This is why the requests feel oddly generic, and why the person never follows up with anything worth reading. There was never going to be a conversation.
The tells that survive a five second look
People who have picked apart coordinated batches of these profiles keep reporting the same details. Photographs are the fastest signal. Generated faces have a flatness that a real photo does not, and the giveaway people keep landing on is the teeth. Real teeth are slightly uneven, slightly discoloured, slightly out of line with each other. Generated ones come out as a clean identical row with none of that natural asymmetry, and once you have spotted it on two profiles you will spot it on every one afterwards. Ears are worth a glance too, and so is the place where hair meets the background.
Activity is the second signal, and it works backwards from what most people expect. An empty profile is so obviously fake that operators stopped shipping them. What they ship now is a profile busily resharing articles from serious outlets like the BBC or Wired, with no comment attached or a single line that could sit under any article ever published. It reads as a professional keeping up with the news. It is camouflage, and you catch it by noticing that the reshares have nothing to do with the job the profile claims to hold.
After those two, the rest is mechanical.
- A senior job title with a start date a few months old and no employment history behind it.
- A real company, but the profile does not appear when you browse that company’s people tab.
- A headline stuffed with industry keywords that the rest of the profile does not support.
- Dozens of shared connections, all of them colleagues at your own employer, which is the harvesting pattern showing itself in plain sight.
- A name and a face from different regions. Real people are like this constantly, so it counts for nothing alone, but it stacks with everything above.
Worth knowing that LinkedIn catches most of these long before they reach you. Its community report covering July to December 2025 says 99.7% of the fake accounts it stopped were caught proactively, before any member reported them, and that 97.8% of them were stopped by automated defences rather than manual investigation. What lands in your invitations is the residue that got through the filter, which is exactly why the ones you see tend to be the better made ones.
What you hand over the moment you accept
First-degree connections see things the rest of LinkedIn does not. Depending on your settings that can include the email address on your account and any phone number you added years ago and forgot. It also includes your connection list itself, unless you have gone into your visibility settings and changed who can see it. Most people have never opened that setting.
Then there is the part that lands on other people. Once the account is connected to you, it appears to your colleagues as a mutual connection, and a request arriving with mutual connections attached reads as vouched for. You become the credential. That is the whole reason for adding you in the first place, and it is why this matters even if you personally would never click a suspicious link. The cost gets paid by the people who trust you.
Whether a bloated network drags down your own reach
Here is where I am supposed to say that none of this touches your posts, that a connection is a connection, and that a bigger number is simply a bigger number. That is the standard line and you were probably expecting it from me too. It has quietly stopped being true.
Distribution on LinkedIn turns on who engages with a post in its first stretch of life, and on how relevant those people look to the wider audience the system is deciding whether to expand into. An account that exists to sit inside networks does not read your posts. It never comments. When several hundred of them occupy your first degree, your posts go out to an opening wave that does not react, and the early signal comes back weak. Nothing dramatic happens. Your reach simply runs a little worse than it should, permanently, and you never identify the cause because there is nothing visible to identify.
The second cost is your own judgement. If a quarter of your network is harvesting accounts, your follower count has stopped measuring anything, and you start making decisions about what to post against a number that is partly fiction.
Pruning them without getting your own account restricted
This is where people do themselves real damage, so slow down here. LinkedIn watches for burst behaviour across removals, reports and outgoing invitations, and the systems looking for automation cannot tell the difference between a script and a human doing forty removals in ten minutes on a Sunday afternoon. Getting your account restricted while cleaning up after fake accounts is a genuinely common outcome, and it is entirely self-inflicted. A restricted account cannot message clients, cannot send invitations and takes days to sort out.
Do it slowly, and in this order.
- Handle new requests at the invitation stage. Choose Ignore, and when LinkedIn offers the follow-up option, select the one saying you do not know this person. That does more than declining. LinkedIn states that an account collecting an excessive number of those responses can be restricted from sending invitations at all, and the sender is never told who marked them.
- Report only the profiles you are confident about. Reporting is a heavier action and a careless one costs you credibility with the review process.
- For connections you already accepted, remove a small batch at a time and spread it across several days. Nobody is handing out a prize for finishing tonight.
- Leave gaps between different actions. Do not stack removals, reports and a burst of new outgoing invitations into one sitting.
- Fix your settings once, which achieves more than any amount of pruning. Set your connection list so only you can see it, and delete any phone number that does not need to be on a public professional profile.
Removing a connection is silent. The other person receives no notification, and if they were a harvesting account they were never watching your profile anyway.
A default for the next request that lands
Decide the rule now, while you are calm, so you are not making a judgement call every morning. Mine is straightforward. If the profile gives me one concrete reason this person would want to talk to me, and that reason survives ten seconds of reading, I accept. A shared client. A conference we both attended. A post of mine they actually commented on. If the only thing on offer is a job title and a face, I ignore it and mark it unknown.
You will occasionally turn away someone real. That is a smaller loss than it feels like, because a real person with a genuine reason to reach you will send a message, follow you, or turn up again. The harvesting account will not. It moves on to the next name on the list, which was always the point.
