A text from an unknown number arrives, meant for someone else. Your first instinct might be to politely reply, 'Sorry, wrong number'. But scammers are counting on your courtesy to open the door to sophisticated and financially devastating frauds.
The Scam That Starts With 'Sorry'
It begins
innocently. A message lands in your inbox: 'Hi, are we still on for dinner tonight?' or 'Did you get the files I sent over?'. It's addressed to someone you don't know. These are not always genuine mistakes. This is often the calculated opening move in a wrong-number text scam. By replying, even just to correct the sender, you confirm your number is active and that you are willing to engage with a stranger. A real person would likely apologize and end the conversation. A scammer, however, will use your politeness to start a conversation, often complimenting your kindness and asking where you are from. This is the first step in a patient, well-scripted social engineering attack designed to win your trust.
From Friendly Chat to 'Pig Butchering'
If the scammer succeeds in starting a conversation, they begin the long game. Over days or even weeks, they build a rapport, sharing personal stories and doctored photos to create a sense of friendship or even romance. This grooming process has a dark name: 'pig butchering'. The scammer 'fattens up' their target with trust and affection before leading them to the 'slaughter'—financial ruin. Eventually, the conversation will pivot to money. They might boast about their success in cryptocurrency or another type of investment, offering to share their 'secret' with you out of generosity. They will direct you to a fake trading app or website that looks completely professional, even showing you initial 'profits' from a small first investment to build your confidence. Convinced it's real, victims pour in more and more money until they try to withdraw it. Suddenly, the scammer vanishes, and the platform freezes, often after demanding more money for fake 'taxes' or 'fees'.
The Danger in a Single Click
Not all wrong-number scams are this elaborate. A more common and immediate threat is 'smishing'—phishing conducted via SMS. In these cases, the goal is simpler: get you to click a malicious link. The text might create a sense of urgency, claiming a package couldn't be delivered, a bank account has been compromised, or you've won a prize. Clicking the link can have several dangerous consequences. It can take you to a counterfeit website designed to look like your bank or another trusted service, tricking you into entering your login credentials and passwords. Alternatively, the link could initiate an automatic download of malware onto your phone. This malicious software can spy on your activity, steal personal data, access your camera and microphone, or even encrypt your files and hold them for ransom.
Red Flags to Watch For
Protecting yourself starts with recognising the warning signs. Be highly suspicious of any unsolicited message from a number you don't recognise. A key red flag is when a supposed wrong-number sender tries to prolong the conversation after you correct them. Other warning signs include messages that create a sense of urgency or fear, promising rewards, or asking you to click a link to resolve an issue. Any stranger who quickly becomes overly friendly or whose conversation eventually turns to investment opportunities is almost certainly a scammer. Remember, legitimate organisations like banks will never ask you for your password, PIN, or one-time password (OTP) via a text message.
How to Respond Safely
The safest response to a suspected scam text is no response at all. Do not reply, not even to say 'STOP'. Simply block the number and delete the message. Engaging with them confirms your number is active, which can lead to more scam attempts. Never click on links in unexpected texts. If a message claims to be from your bank or a delivery service, contact the company directly through their official app or website, or by calling a number you know to be legitimate. If you have been a victim of a financial scam, you should report it immediately. In India, you can call the national cybercrime helpline at 1930 or file a complaint on the National Cyber Crime Reporting Portal at cybercrime.gov.in. Reporting quickly increases the chances of freezing fraudulent transactions.
