Malwarebytes researchers are warning about texts that ask whether an item shown in an apparent Facebook Marketplace listing is still available. The image displays the recipient’s name as the seller, although the person did not create the listing.
In an example examined by researchers, the profile picture belonged to a different Facebook user with the same name. Malwarebytes said the sender may have had access to a name and matching phone number, but the source of those details has not been established. Researchers also have not determined what the sender would do after receiving a reply.
The text appears designed to start a conversation by raising concern that someone is impersonating the recipient. The Federal Trade Commission warns that replying to an unexpected text can confirm a phone number is active, potentially making it a target for further unwanted messages. Malwarebytes said the specific campaign’s motive remains uncertain.
A fake listing image alone does not show that someone accessed the recipient’s Facebook account or created an impersonating profile. Users can check their Marketplace activity and account security by opening Facebook directly, rather than using links or contact details sent in the text.
Apple recommends treating unexpected messages as possible scams and contacting organizations through trusted channels. Its Messages app offers options to filter unknown senders, report suspicious messages and block numbers. The FTC also advises against replying to unexpected texts; unwanted messages can be forwarded to 7726 (SPAM).
Researchers said automation could make personalized messages easier to produce, but they have not established that artificial intelligence was used to create the example they reviewed. The incident illustrates how a familiar name can make an unsolicited message feel credible without proving that the sender has access to an account.
