I had seen a youtube video which showed how to target accounts for phishing. I think incase of IMVU they just go to comments/likes section on discover and send out messages to people that have commented/liked the post, so if your following discover posts liking/commenting on them then there are high chances of getting this messages.