The “Hi” That Could Rob You

Scammers have turned the innocent greeting into a weapon. A single vague text is all it takes to pull you into an elaborate trap — and most people never see it coming.

You pick up your phone and see a message from an unknown number: “Hey, how are you?” Harmless enough — maybe it’s a friend who got a new phone. You type back, “Who is this?” And just like that, you’ve handed a scammer exactly what they needed.

This tactic, known as smishing (SMS phishing), has quietly become one of the most effective fraud vectors worldwide. Unlike elaborate email scams, it requires almost no effort, and it works precisely because it looks so human and innocent.

Why scammers cast such a wide net

Fraudsters acquire phone numbers in bulk — through purchased lists, data breaches, and automated random-number generators. The cost of sending a million texts is negligible. Even if 99% of recipients ignore it, the remaining 1% represents thousands of potential victims, each worth hundreds or thousands of dollars to the right operation.

A simple reply confirms your line is active — instantly making your number more valuable than the millions of dead contacts surrounding it. That “live” status is itself a commodity. Verified active numbers are compiled into lists sold on dark web marketplaces, recycled through networks of fraudsters, and retargeted with increasingly sophisticated schemes over time.

How a bland greeting becomes a trap

Once a scammer has your attention, the real work begins. Skilled operators are patient — they’ll spend days or weeks building fake rapport before ever mentioning money. Common escalation paths include:

Crypto investment scams (“pig butchering”): A friendly stranger slowly introduces you to a “can’t-miss” investment platform, coaches you through fake returns, then vanishes once you’ve deposited real funds.

Fake emergencies: After establishing trust, the scammer fabricates a crisis — a sick relative, a legal problem, a stranded traveler — and asks for a quick wire transfer or gift cards.

Malware links: A seemingly relevant link — a photo, a deal, a news story — is embedded with software that silently harvests passwords, banking credentials, or contacts from your device.

Why “generic” is a feature, not a bug

Spam filters are trained to flag urgent language — warnings about accounts, prize notifications, and deadline pressure. A vague, warm greeting like “Long time no see!” trips none of those wires. It reads as personal rather than promotional, slipping through automated defenses and landing directly in your primary inbox.

Scammers also spoof local area codes to create a sense of familiarity. Seeing a number that matches your own area code triggers a subconscious assumption that the sender is nearby — a neighbor, a coworker, someone you might actually know. That tiny nudge is often all it takes to prompt a reply.

Texts also have a staggering 98% open rate compared to roughly 20% for email, meaning nearly every message a scammer sends gets seen. With those numbers, even a 1% response rate is more than enough to run a profitable operation at scale.

How to protect yourself

  • Never reply to texts from unknown numbers — even “wrong number” confirms your line is active.
  • Don’t click links in unsolicited messages, regardless of how harmless they appear.
  • If a “friend” contacts you from an unfamiliar number, verify through a known channel before engaging.
  • Report smishing attempts to your carrier by forwarding the message to 7726 (SPAM).
  • Enable your phone’s built-in spam filtering and consider a call-blocking app for an added layer of defense.

Follow us on LinkedIn – Build, Grow, Convert.