I have always promoted the idea of a secret handshake.
Human handshakes don't work unless the people are in close proximity, IRL.
Asking if someone is "a friend of Simon" can be done online or in person, and in cases of uncertainty can be explained away as "I thought someone said you had a friend named Simon" or some such.