THE SCAM Your phone buzzes with a text from a number you don't recognize. There's no link, no warning about an overdue bill, no threat that your account is about to close. It's just your name, followed by a question mark.

That's the whole message — and that's the point. It looks like someone you know is trying to reach you, and your first instinct is to be polite and answer: "Yes?" or "Who's this?" But the sender probably doesn't know you at all. Your name and phone number together are easy to buy: they spill out of data breaches and get traded between criminals.

The reply is what the scammer is fishing for. Once you answer, they know your number is live and that you're willing to talk. From there, the conversation can slowly turn friendly — a wrong-number chat that becomes a new friend — until an "investment opportunity" shows up and the real ask for money begins. Even if it never gets that far, your reply alone marks your number as worth selling on to other scam campaigns.

THE RED FLAG A real message from someone you know doesn't arrive as a mystery. If a friend got a new number, they'd usually say who they are in the first message — not leave you guessing with just your name and a question mark.

The emptiness of the message is the trick. There's nothing to be suspicious of — no bad link, no bad grammar, no wild promise — so your guard stays down. And because it uses your real name, it feels personal, like it couldn't possibly be a mass text. It can be: the same message, with a different name swapped in, can go out to thousands of numbers at once.

The FTC has warned about exactly this kind of short, harmless-looking opener. Scammers need you to engage before they can persuade you to hand over money or personal information — and sometimes the first thing they ask you to give them is simply a reply.

THE RULE Don't reply — not even to say "Who's this?" or "Wrong number." Any answer tells the scammer your number is active and that you'll engage. If you think it might genuinely be someone you know, reach out to them through a number or channel you already trust, not by answering the mystery text.

Report the message in your messaging app first, then block the sender. And if you already replied, don't feel bad about it — just stop engaging now, and don't follow the conversation wherever it tries to lead.

Make yourself a harder target, too: check the privacy settings on your messaging apps and social media, and limit who can see your profile photo, status, and phone number. The less of you that's floating around in breached data, the less convincing the next mystery text will be.

Read it online: https://erawaeb.com/digest/daily/040-the-text-that-s-just-your-name-and-a-question-mark/ (Source: Malwarebytes threat report, October 13, 2026)