Occasionally (as in once per week or so) I receive contact requests, but don't recognize the username. Sometimes this is simply because someone I know uses a username I am not aware of, but just as often it is some spam agency, auto-bot, or Indian company trying to sell their services.
When only accepting someones request, i.e. to find out whether it is genuine, do I run into any risks? My main guess is: the risk of receiving more spam (as you appear "alive") and that, as long I don't accept files or links, there should be no real virus threat.
Is this assumption correct?