Scammers Send Your Name With a Question Mark to Spark Replies

Scammers are sending text messages that begin with a recipient’s real name followed only by a question mark. The message contains no link, no urgent warning, and no request for money, yet the personal greeting is designed to make the recipient reply. According to Malwarebytes, the reply gives the fraudster a foothold to build a conversation that can later turn into an investment scam, a fake “wrong‑number” chat, or another type of fraud.

Why the simple greeting works

When a text includes the exact name tied to the phone number, it feels personal. Malwarebytes notes that the FTC has warned about brief, seemingly harmless texts that are used to start conversations. The lack of additional context leaves the recipient with an obvious question: Who is texting? That question, paired with the correct name, creates a higher likelihood of a reply. The source explains that name‑and‑phone‑number pairs often come from data breaches that cybercriminals buy and reuse.

Typical scam progression

The first message is deliberately vague. Once the target replies, the scammer can choose a path that fits their goals. Malwarebytes outlines several documented routes:

• Pretending the message is a wrong‑number exchange, then turning the chat into a friendly dialogue.
• Gradually building trust before introducing a fraudulent investment opportunity, often involving cryptocurrency. The FBI describes how scammers use this trust‑building stage to convince victims to send money.
• Even if the conversation stalls, the mere fact that the victim responded marks the number as “engaged,” making it more valuable for resale to other scam operators.

How to protect yourself

The advice from Malwarebytes focuses on breaking the engagement loop before it can be exploited. Follow these steps:

• Do not reply. Even a polite “Who’s this?” confirms you are willing to engage.
• Report and block. Use your messaging app’s built‑in reporting feature, then block the sender.
• Verify known contacts through trusted channels. If you suspect the text might be from someone you know, call or message them using a number or app you already trust.
• Limit the visibility of personal details. Review privacy settings on messaging apps and social media. Restrict who can see your profile photo, status, last‑seen timestamp, and phone number.
• Scan for exposed data. Run a Malwarebytes Digital Footprint Scan to see if your information appears in known breaches or on the dark web.
• Check the sender’s number. Use Malwarebytes Scam Number Check to learn whether the phone number has been flagged for spam or scams.
• Educate staff and family. Make sure everyone in your organization understands that a simple name‑only text can be a trap.

For a deeper look at how attackers might already know details about your website, visit our security resources page.

What to do if you’ve already replied

If you have responded to a name‑only text, stop the conversation immediately. Do not provide any personal or financial information. Consider the following actions:

1. Cease all further replies. The scammer may try to steer the chat toward a request for money or data.
2. Report the number. Most carrier apps let you report spam directly from the message thread.
3. Monitor accounts. Keep an eye on bank, credit‑card, and online‑service accounts for unauthorized activity.
4. Run a security scan. Use the Malwarebytes Digital Footprint Scan again to see if the breach that exposed your name has led to additional exposure.

Staying ahead of future scams

Scam tactics evolve quickly, but the underlying principle remains the same: attackers exploit any personal detail that makes a message feel targeted. By minimizing the amount of personal data that is publicly reachable, you reduce the odds that scammers can craft convincing name‑specific texts. Regularly update privacy settings, use two‑factor authentication on accounts that store your phone number, and keep security tools like Malwarebytes active.

Remember, the safest response to an unexpected text that only says your name and a question mark is silence. Reporting and blocking are the quickest ways to protect yourself and help stop the broader scam network.