TEXT scammers are honing a simple opener that relies on personal data exposed in breaches: a message that starts with the recipient’s name followed by a question mark. Malwarebytes reports that the tactic is deliberately minimal—no suspicious links, no urgent threats, just an ordinary-sounding prompt that invites a reply. The aim is to trigger engagement, which can then be exploited to extract money or further personal information.
The article notes that brief, name-based introductions have become a recognisable entry point for such scams, aided by the belief that the sender must be someone the recipient already knows because of the included name and number.
The exact route after the initial reply varies. Documented scams show a progression from a wrong-number style exchange to a developing relationship, eventually steering the victim toward fraudulent investments or other financial asks. The FBI and FTC references cited in the piece describe cryptocurrency and investment‑related scams that build trust before pushing fake opportunities; unsolicited texts are identified as one method used to approach victims.
Even if the conversation ends quickly, replying signals willingness to engage and can make your number valuable for future campaigns, including sale on dark‑web or other fraud networks.
Practical responses recommended include not replying, reporting the message to the platform before blocking the sender, and reviewing privacy settings to limit how much information is visible. Malwarebytes also offers tools such as a Digital Footprint Scan and a Scam Number Check to help users assess exposure and the risk of being targeted. The overarching guidance is clear: do not engage with a “Who’s this?” text and instead verify through trusted channels if there is any doubt about a contact.