A spam text message appeared from myself

In the text thread for my own contact profile—the thread where messages show up if I send a text message to my phone number—a message showed with a phishing link, that I didn’t send.


It says below it “Not shown in Shared with You”.


All of the other texts I’ve sent to myself in the past are above it. This is in the actual thread for my own contact profile.


It only shows up once, on the left side in grey, as if I received it. Every other text in this thread (that I did actually send to myself) shows up twice—once on the right in blue when I sent it, and a second time on the left in grey when I received it. This one only shows up on the left in grey.


How is this possible?


I have two factor authentication enabled, so I know that nobody has signed in to my Apple ID externally.


I also know with certainty that nobody has physically gained unauthorized accessed to any of my devices.

Posted on Mar 27, 2022 1:47 PM

Reply
Question marked as Top-ranking reply

Posted on Mar 28, 2022 11:47 AM

From The Verge this afternoon:


“Photo by Chris Welch / The Verge

This morning, I received a very blatant spam text offering me “a little gift” for supposedly paying my phone bill. Normally I’d groan, roll my eyes, and quickly delete such a thing, but there was something different about this particular message: it was spoofed as coming from my own phone number. As best my iPhone could tell, it was a legitimate message from me to myself. Tapping into the sender details took me to my own contact card.

Equally frustrating was that I had no obvious way of reporting the alarming spoof to my carrier, Verizon Wireless. Spoofed calls and texts are nothing new; most people face a constant deluge of spam calls that appear on caller ID as from a number similar to their own. But this was the first time I actually got something from my own number. These scammers keep getting more sophisticated.

Turns out I wasn’t alone. More than a few customers on Verizon reported getting similar spam from their respective numbers over the last few days — same for its MVNO Visible — and several Verge employees on other carriers have also encountered them. I posted an Instagram story about it and have gotten plenty of “same” responses. SMS phishing, or “smishing,” has been on the rise in recent years, but there’s something more disconcerting and invasive about it being linked to your own number. It’s all very “the call is coming from inside the house.”

The main reaction on Twitter is confusion and “how?!” Again, this is all spoofing and technological impersonation. It’s trivially easy for spammers to camouflage as any number they choose. My Verizon account is secure, and my number hasn’t been hijacked. If you’ve gotten the same message, there’s no cause for panic. Just don’t go clicking that link.

Still, it often feels like the phone carriers are losing the war against scammers. I don’t envy having to contend with the sheer volume of spam attacks that come across their networks daily, but this is getting out of hand. I’ve noticed an uptick in general SMS spam over the last several weeks. And as Alex Lanstein noted on Twitter, this particular message contains several phrases — “free msg,” “bill is paid,” “gift” — that one assumes would be flagged by Verizon’s spam protection systems. And yet it came through successfully. And since this one showed as coming from me, the text also successfully evaded Apple’s “filter unknown messages” feature.”

Similar questions

85 replies

Mar 28, 2022 8:43 AM in response to Billyeee

Another victim here. Thought I'd seen it all, but this approach of spoofing my own # is new to me.


Could an expert please confirm my understanding:


1 - Spoofing my number means that they can only Send a message from my number. They cannot receive replies sent to my number. Right??


2 - Is there any way to know if in addition to my number, they have my name? Or is that only likely/possible *IF* I were to click the link and provide it to them? (which I have NOT done) In other words, is it possible that they could impersonate me by name, AND send a message to others? For example, send a text to someone else, and invoke my name to legitimize that the message is really from me.


The latter is the biggest worry I have. If this scenario is possible, I'd immediately alert my contacts to warn them.

Mar 28, 2022 9:59 AM in response to Billyeee

SMS spoofing can change the name and mobile number of the original sender. This means that you as a receiver can't know who the original sender of the text is. Although there are many good reasons for SMS spoofing, many scammers are using the technique to take advantage of unsuspecting individuals.


https://calleridreputation.com › blog

SMS Spoofing Scams Target Reputable Organizations


That being said, can someone send a text from your number? Absolutely. There are many ways to spoof the outbound number, both for a call and a text. Most VoIP providers allow the user to set their outbound ID.

https://www.quora.com › Can-some...

Can someone use my name and phone number to send a text to ...


Mar 28, 2022 10:07 AM in response to Billyeee

And this from Apple:


Thank you for reporting a suspected phishing email to Apple. This message was automatically generated in response to your report to let you know that we received it. Please don’t reply to this message. 


If you think you might have entered personal information like a password or credit card info on a scam website, immediately change your Apple ID password.


Scammers use any means they can—fake emails, pop-up ads, text messages, even phone calls—to try to trick you into sharing your information, like your Apple ID password or credit card number.


To help protect your personal information, use two-factor authentication for your Apple ID, and never share your Apple ID password or temporary verification codes with anyone.


Learn more about security and your Apple ID.

Learn how to protect yourself from phishing and other scams.



This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

A spam text message appeared from myself

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.