A scam text does not need a link, a fake bill, or a scary warning to be dangerous. According to Malwarebytes, some messages now start with only your name and a question mark, hoping you will answer and prove your number is active.
That matters for households because a quick “Who’s this?” can help a scammer profile you, start a longer con, or mark your phone number as worth targeting again.
What happened
Malwarebytes described a simple scam text that used the recipient’s name followed by a question mark. There was no link, no attachment, and no obvious demand for money. The goal was to get the person to respond.
According to Malwarebytes, scammers can get name-and-phone-number combinations from breached data that is traded by criminals. Having your name does not prove the sender knows you. It may only mean your information appeared somewhere before.
Malwarebytes also points to warnings from the Federal Trade Commission about short, friendly-looking texts that try to start a conversation. The FBI has described cryptocurrency investment scams where criminals build trust first, and unsolicited texts can be one way they make contact.
The first message may not reveal the final scam. It could lead to a fake investment pitch, a request for personal information, or another fraud attempt. Even if the conversation stops after one reply, Malwarebytes says your answer can show that your number is active and that you are willing to engage.
Who is affected
Anyone with a mobile phone can receive this kind of message. It may be more convincing when the scammer uses your real first name, because it feels personal and may look like a normal contact trying to reach you.
The source does not say that one phone carrier, state, age group, or messaging app is being singled out. It also does not disclose how many people received this exact style of text.
People who have had their name, phone number, or other personal details exposed in past data breaches may be easier to target. Malwarebytes says those details can be used to make an otherwise plain message feel legitimate.
What to do now
Do not reply to vague texts from unknown numbers, even to say “wrong number” or “who is this?” A reply can tell the sender that your number is active.
If the message might be from someone you know, do not use the unknown text thread. Contact that person through a phone number, email, or messaging app you already trust.
Use your phone’s report option before blocking the sender. On iPhone or Android, look for the spam, junk, or report control in the message thread, then block the number.
If you already replied, stop the conversation. Do not explain, click anything, send a photo, share a code, or move the chat to another app.
Review your privacy settings in messaging apps and social media. Limit who can see your profile photo, status, last-seen activity, and phone number when those controls are available.
Talk with family members about short, personal-looking texts. A shared rule helps: unknown sender plus vague question equals no reply. CyberSec24 also recommends setting a family verification phrase for urgent money or emergency messages: How to Set Up a Family Safe Word.
For broader scam habits, see CyberSec24’s QR Code, Toll-Text and Package Scams guide. The same core rule applies here: slow down, verify through a trusted channel, then block and report.
Sources
- Scammers know your name, and they’re counting on you to reply — Malwarebytes Labs
Written by the CyberSec24 news desk with AI assistance, from the sources above. Spot an error? Tell us and we'll correct it.