Reply Once, Lose Everything

Graphic design featuring an attention alert with the word 'IMPORTANT'
Photo: Shutterstock

A scammer texts you a Facebook Marketplace listing that shows your name as the seller—and that single jolt of familiarity is the hook.

Story Snapshot

  • Unsolicited iMessages carry a fake Facebook Marketplace listing using your name as the seller
  • The profile image can belong to a different Facebook user with the same name, signaling a fabricated identity
  • Replying confirms your number is active and can trigger follow-on fraud or account takeover
  • Meta urges caution on suspicious Marketplace listings and too-good-to-be-true prices

A new twist: your name on a fake listing

Malwarebytes documented a lure that starts with a short iMessage: “Is this still available for purchase?” The text includes an image of a Facebook Marketplace listing that displays the recipient’s own name as the seller. The listing looks familiar and personal, which lowers your guard. The report calls it a conversation lure, designed to make you reply and keep chatting. The trick works because it feels like a mistake from someone who knows you, not a scam blast.

The listing’s profile image raises another red flag. The picture could belong to a different Facebook user with the same name, suggesting the attacker mixed and matched public identity pieces. That combo—your name plus someone else’s photo—can look plausible at a glance. It also means the message does not prove your Facebook account is hacked. It proves someone can stitch together a fake seller identity fast and make it feel close to home.

Why the first reply costs you

Scammers prize confirmation. A single reply tells them a real person sits behind the number. That reply raises your number’s resale value and invites more contact. The next steps can include links, requests for codes, or payment pitches. Malwarebytes warns that these flows can lead to Facebook account takeover, malware delivery, and other fraud. The safest move is to ignore, block, and report the sender rather than confirm anything about yourself.

Meta’s safety guidance fits here. The company tells shoppers to watch for listings that are priced far below market value and to be wary of odd requests that move you off the platform. Even when the listing image looks familiar, the price, payment path, and pressure cues still matter. If a seller pushes you to text, pay by gift card, or use a sketchy delivery service, stop. A real Marketplace sale does not need secrecy or rush tactics to close.

The bigger trend: impersonation is booming

This tactic sits inside a much larger wave of impersonation fraud. The Federal Trade Commission (FTC) reported that people lost $2.95 billion to impersonation scams in 2024, showing how effective identity cues can be when crooks mimic trusted names and platforms. The Federal Bureau of Investigation (FBI) recorded 859,532 internet-crime complaints in 2024, with losses over $16 billion, underscoring the sheer scale of online crime across many schemes, not just Marketplace tricks.

These numbers don’t make every message a crisis, but they show the odds aren’t in your favor if you engage. The safest habit is simple: treat any message that names you, rushes you, or flatters you as a test. Slow down, open Facebook directly, and search your own Marketplace activity. Do not click images or links in a text from a stranger. Real buyers and sellers can wait while you verify.

Common-sense steps that shut this down

Verify inside the app, not through a text. Open Facebook, check your Marketplace listings, and confirm any message thread there. Refuse to move the chat to text, email, or a random link. Turn on two-factor authentication for Facebook and your email. Never share one-time codes with anyone, even if the caller knows your name. Block and report suspicious numbers. File a report with the Federal Trade Commission if you exchanged money or sensitive data; patterns help the authorities act.

What this tells us about modern scams

Criminals learned that personal details beat perfect grammar and fancy graphics. Your name on a listing is enough to start a chat. From there, scripts do the rest. This is social engineering at street level—fast, cheap, and personal. The conservative bet is to value personal responsibility online the way you do with your wallet at a crowded market. Confirm before you trust. Hang up before you explain. And remember that the quiet “Nope” you send by not replying is your strongest shield.

Sources:

foxnews.com, consumeraffairs.com, origo.hu, nextekit.com