Who This Helps: Anyone with a phone — but especially New Yorkers who get unsolicited “hi, how are you?” texts from numbers they don’t recognize, parents trying to protect older relatives, and anyone who has ever responded to a stranger’s text just to be polite.
If you have received a text in the last few weeks that just says “Hi” or “Hello, is this Sarah?” or “Want to play golf this weekend?” from a number you don’t know — that is almost certainly a scam, and the New York State Department of State has a name for it: the “friendly greeting” phishing scam.
The Division of Consumer Protection at the New York State Department of State has issued a consumer alert warning New Yorkers that these short, conversational opening messages are not someone texting the wrong number. They are the opening move of an organized scam, and even responding politely to say “wrong number” is enough to get you flagged as a live, responsive target. Full details of the alert are at dos.ny.gov.
How the Scam Works
According to the NYS Division of Consumer Protection, scammers send a short greeting from an unknown number as a conversation starter. The goal is to establish a connection and build trust over several messages. Many of these messages are personalized with your first name or another piece of information that makes it look like the sender knows you.
Examples cited in the state alert include:
- “Hi, how are you?”
- “Hello. Is this [your name]?”
- “Do you want to play golf?”
- “How about going shopping together tomorrow?”
- “Do you want to come out to dinner tomorrow?”
If you respond — even just to say “wrong number” — the scammer logs your number as active and the conversation begins. From there, the script typically pivots in one of three directions: a romance scam, a “pig butchering” cryptocurrency investment scam, or a phishing attempt designed to harvest personal information or get you to click a malicious link.
Why This Scam Is Hitting NYC Hard
New Yorkers are a dense, valuable target population. Phone scams have surged across the state — recent FTC complaint data has logged hundreds of thousands of scam reports across New York’s 20 area codes. Combined with the broader wave of consumer scams the New York Attorney General’s office has flagged for 2026 — including AI voice-cloning grandparent scams and fake event-ticket sales tied to upcoming major sporting events — phishing texts are arriving in extraordinary volumes.
How to Take Action
The state’s guidance is straightforward, and so is the response. Here is what works.
1. Do not reply. Not even to say “wrong number.” Replying confirms your number is active and routes you into the next phase of the scam.
2. Use your phone’s “Report Junk” feature. On iPhone, tap the message thread, tap “Report Junk” at the bottom. On Android (Messages app), tap and hold the message, tap the menu, and select “Block & report spam.” This deletes the message and reports it to your carrier and to Apple or Google.
3. Forward unwanted texts to 7726 (which spells SPAM on a phone keypad). This is the universal carrier-level reporting code in the United States. Your carrier — Verizon, AT&T, T-Mobile, or any major U.S. provider — uses these reports to identify and block scam numbers across their network.
4. Block the number. After reporting, block. This won’t stop scammers from rotating to new numbers, but it stops that specific number from reaching you again.
5. File a complaint with NYS Consumer Protection. Call the New York State Division of Consumer Protection at (800) 697-1220 or file online at dos.ny.gov/consumer-protection. Volume of complaints helps the state target enforcement actions.
6. Report to the FTC. The Federal Trade Commission tracks scam complaints nationally at reportfraud.ftc.gov. Reports take about five minutes and feed federal enforcement.
7. If you already responded — stop responding now and don’t send money or click links. Block the number, report it. If you sent money, contact your bank immediately and file a police report at your local NYPD precinct. The Manhattan DA’s Cyber Crime Bureau and the FBI’s IC3 portal at ic3.gov handle larger losses.
Sign Up for Real Alerts So You Don’t Confuse Scams With Government Messages
One reason these scams work is that legitimate government text alerts also exist, and people get confused. NYC’s official emergency alert program is Notify NYC. To enroll, text NOTIFYNYC to 692-692 or visit on.nyc.gov/NOTIFYNYC. Notify NYC sends weather emergencies, public safety alerts, and major service disruptions. Real Notify NYC messages will identify themselves clearly. They will never ask you to click a payment link, share a Social Security number, or “verify” anything financial by text.
If a text claims to be from the city, the IRS, the DMV, the SSA, or any government agency and asks you to click a link, send money, or hand over personal data — it is a scam. Government agencies do not collect payment by text or by gift card.
Protect the People in Your Life Who Are Most at Risk
Older relatives are disproportionately targeted by friendly-greeting scams that morph into romance or investment scams. Have a conversation with parents, grandparents, and any tech-cautious relatives. Tell them: don’t reply to unknown numbers, don’t send money or gift cards in response to a text, and call you first if anything feels off. Set up a family code word for any “emergency” call asking for money — AI voice-cloning is now realistic enough that the voice on the line may sound exactly like a loved one.
Frequently Asked Questions
What if it really is a wrong number? If it’s a wrong number from a real person, they will not follow up with engagement attempts after you don’t respond. Real wrong numbers are one-shot. Friendly-greeting scams will keep texting.
Is replying “STOP” enough? No. Legitimate marketing texts honor STOP. Scam texts use any reply — including STOP — as proof your number is active. Don’t reply at all.
Can my carrier block these for me? Major carriers offer free spam-blocking apps and services. Verizon Call Filter, AT&T ActiveArmor, and T-Mobile Scam Shield all include text spam filtering. Turn them on.
What if I clicked a link? Disconnect from the internet, run a malware scan, change passwords for any account you may have entered credentials into, and watch your bank and credit card statements closely. Place a free fraud alert with one of the three credit bureaus — Equifax, Experian, or TransUnion — and they will notify the other two.
This article is general public-safety information. If you have lost money to a scam or believe your identity has been stolen, file a police report at your local NYPD precinct, contact your bank immediately, and report to the FTC at reportfraud.ftc.gov.
