Why do people with empty fake-profiles go to such great lengths to get hold of personal data? Blocking them takes just one click.