It often starts innocently: a message meant for someone else pops up on your phone. While your first instinct might be to politely correct the error, security experts warn this could be the opening move in a sophisticated scam.
From Mistake to Manipulation
A genuine wrong-number text
is usually a one-and-done affair; the sender apologises and the conversation ends. A scam, however, is different. These messages are deliberately sent to your number, not by accident. The sender isn't a hapless stranger but a scammer testing the waters. When you reply, even with a simple 'Sorry, wrong number', you confirm that your number is active and that you're responsive. This confirmation makes your number more valuable to criminals, who may then target you further or add your number to lists sold to other scammers. The initial message is designed to be disarming—mentioning a meeting, asking about someone you don't know, or a simple 'hello'—precisely because it doesn't look like a threat.
The 'Pig Butchering' Playbook
One of the most common and financially devastating scams that starts with a wrong-number text is called 'pig butchering'. The name comes from the scammers' own terminology, referring to the process of 'fattening up' a victim with trust and friendship before the financial 'slaughter'. After the initial 'mistaken' text, the scammer will apologise but attempt to strike up a friendly conversation. Over days, weeks, or even months, they build a rapport, often sharing details of a lavish lifestyle and feigning romantic or friendly interest. Once trust is established, the conversation pivots to a can't-miss investment opportunity, typically involving cryptocurrency. They guide the victim to a fake but professional-looking trading platform where initial small investments appear to generate huge returns, encouraging larger and larger deposits until the scammer eventually disappears with all the money.
Red Flags to Watch For
Distinguishing a real mistake from a scam attempt is crucial. Be wary if the stranger continues the conversation after you've pointed out their error. Other warning signs include the sender having an attractive profile picture and claiming to live a glamorous life, an eagerness to move the conversation to an encrypted app like WhatsApp or Telegram, and showering you with compliments. Any stranger you've only ever texted who brings up investment advice, especially involving cryptocurrency, is a major red flag. Legitimate companies and financial institutions will also never ask you for passwords, PINs, or account numbers via text. Be suspicious of any message that creates a false sense of urgency, like a fake package delivery notice or a bank fraud alert from an unverified number.
The Safest Response: Do Nothing
Cybersecurity experts agree on the best course of action: do not reply. Ignoring the message may feel impolite, but it's the most effective way to protect yourself. Any response confirms your number is active, which can lead to more scam attempts. Absolutely do not click on any links or download any files sent from an unknown number, as these can install malware on your device or lead to fraudulent websites designed to steal your personal information. Even replying 'STOP' can be counterproductive, as it signals to the scammer that they've reached a real person. The goal is to make your number seem inactive and unresponsive.
How to Report Scams in India
If you receive a suspicious text, you should report it. The Indian government's Sanchar Saathi portal has a facility called 'Chakshu' for reporting suspected fraud communications received via call, SMS, or WhatsApp. This helps telecom operators investigate and block malicious senders. You should also block the number on your phone and then delete the message. Most smartphones have builtin features to block and report spam directly within the messaging app. For general unsolicited commercial messages, you can forward them to the number 1909. If you have already lost money in a scam, you should act immediately by calling the national cybercrime helpline at 1930 and filing a report at cybercrime.gov.in.
