To cut down on spam, the module checks to see that the page that referred it is from your domain. Maybe not allow tell a friend page to be referrer.