Cybercriminals are exploiting Facebook Marketplace's credibility through a personalised phishing scam that uses victims' names and phone numbers to trigger responses and potentially facilitate identity theft.
The attack begins with an unexpected text message asking, “Is this still available?” accompanied by a fabricated Marketplace listing displaying the recipient's name as the seller.
This impersonation technique creates confusion and encourages victims to respond, often attempting to correct the false listing or protect their reputation.
Security researchers suggest attackers may obtain matching names and phone numbers from previously exposed databases or information traded on underground marketplaces.
Artificial intelligence could make such scams easier to automate, enabling criminals to generate personalised listings and distribute deceptive messages at scale.
Responding confirms that a phone number is active, potentially exposing victims to further phishing attempts, malware distribution, account takeover or financial fraud.
Moving forward, users should avoid replying to suspicious messages, verify listings independently and report impersonation attempts. The scam demonstrates how stolen personal information and AI-driven social engineering can undermine digital trust.
See What’s Next in Tech With the Fast Forward Newsletter
Tweets From @varindiamag
Nothing to see here - yet
When they Tweet, their Tweets will show up here.
