If your referral wants to remain anonymous, that is fine, they can wear a mask. See examples below, both are perfectly acecptable.

Here’s a sample two different selfies which are both acceptable: