A message that contains only your name and a question mark may be testing whether you will answer. Do not reply; report it in your messaging app, then block the sender.
In 60 seconds
- Anyone receiving an unexpected text using their name should treat it as a possible scam opening.
- Check the sender through a trusted contact method, not by replying to the suspicious text.
- Report the message in your messaging app, then block the sender.
- Do not answer with “Who’s this?” or “Wrong number”; either reply can invite more messages.
Who should care and what to do now
This alert concerns anyone who receives an unexpected text using their name or starting a conversation without clear context.
If you think the sender may be someone you know, contact that person through a phone number or messaging channel you already trust. Do not use the suspicious text to confirm who sent it.
Report the message through your messaging app’s reporting option, then block the sender. If you already replied, stop engaging and do not provide more information. Do not answer with “Who’s this?” or “Wrong number.”
Why a simple reply matters
Malwarebytes describes a message that contained little more than the recipient’s name and a question mark. It had no suspicious link, payment demand, account warning, or fake image.
The message may be trying to start a conversation. A response such as “Yes?” or “Who’s this?” can show that the number is active and that someone is willing to engage. Malwarebytes says that information can make the number more useful for later scam campaigns or resale.
The sender knowing your name does not prove that they know you. Malwarebytes says name-and-phone-number combinations can come from breached data. A data breach is an incident in which information is exposed or stolen. That information may later be traded by cybercriminals.
How the conversation may develop
The first message may not reveal the sender’s full plan. Malwarebytes says a supposed wrong-number exchange can become a friendly conversation, followed later by an investment pitch or a request for money.
The Federal Bureau of Investigation has described cryptocurrency investment scams that build trust before introducing fake investments. The agency identifies unsolicited texts as one way scammers approach people.
If you already answered, stop engaging. Do not explain the mistake, correct your reply, share personal details, send money, or move the conversation to another app.
General guidance for reducing exposure
As general guidance, review privacy settings on messaging apps and social media. Limit who can see details such as your profile photo, status, last-seen information, and phone number. These steps may reduce what an unknown sender can use to make a message seem personal.
The supplied Malwarebytes report does not identify a software product, affected version, security flaw, or update for this situation. Its recommended response is to avoid engagement, report the message, block the sender, and use a trusted channel if you need to reach the person the sender claims to be.
Does this affect me?
- Who may be affected
- Anyone who receives an unexpected text that uses their name or begins a conversation without clear context.
- How to check
- Ask whether you recognize the sender through a phone number or channel you already trust. Do not reply to the suspicious text to identify the sender.
- What to do
- Report the message in your messaging app, then block the sender. If you already replied, stop engaging and do not provide more information.
- What to avoid
- Do not answer with “Who’s this?” or “Wrong number,” share personal information, click links, or move the conversation to another app.
Common questions
What if the text could really be from someone I know?
Do not reply to the suspicious message. Contact the person through a phone number or channel you already trust and ask whether they sent it.
I already replied. What should I do now?
Stop engaging. Report the message in your messaging app and block the sender. Do not provide more information or continue the conversation.
Does knowing my name mean the sender hacked my phone?
Not by itself. Malwarebytes says names and phone numbers can come from breached data traded by cybercriminals. The text alone does not show that your phone or account was hacked.
Should I report the message before blocking it?
Yes. Malwarebytes recommends using the messaging app’s reporting option first, then blocking the sender.
Primary source
Evidence source: Malwarebytes, “Scammers know your name, and they’re counting on you to reply,” published October 13, 2026. https://www.malwarebytes.com/blog/threat-intel/2026/10/your-whos-this-reply-is-exactly-what-text-scammers-want Read the complete original source.
Get the important updates without the noise
Choose the devices and topics you care about in Cyber Alerts.
Article history: Published Oct 14, 2026 at 6:09 am EDT. Updates and corrections are noted here when material facts change.
