I know a friend of mine whose Facebook account was hijacked. Now I read this: http://www.theregister.co.uk/2009/09/04/facebook_friend_in_peril_scam/
Its scary. It does not matter if you limit who can view your profile or not.

This is truly scary. Thanks for the heads up on this. Reagan said 'Trust but Verify" so I guess the best bet here is to request a direct phone call from whoever asks for help. No need to give your phone number as the 'Friend' should no how to reach you. And if it is a case of customs agents calling ask for their name so that you can give it to the state department to get their assistance. Just a thought but each scam will be different. Trust but Verify.