The channel may be confirmed as active
A response can show that a person reads the address or number, making further contact or targeting more worthwhile.
Technology, platforms and channels
I replied to a scam message — what happens next?
Replying does not automatically mean that your device, account or money has been compromised. It can confirm that the address or number is active, reveal information in your reply and keep the contact open for a more persuasive follow-up.
Page P-020Guidance pageReviewed 29 August 2026
Key Guidance
Stop replying, block and report the sender, and review exactly what you disclosed. If you only replied, the response is usually contact control—not a full account or device recovery. Escalate only if you also clicked, downloaded, shared sensitive information or sent money.
Start with Key Guidance for the short answer. Then read the sections that match what happened and what you need to do.
Guided route 2
I may have shared money, personal details or account access
Current position: Step 1 of 4 — Review the contact. Read the guides in the order shown.
Understand the issue
Why this matters to you
The reply and its effects must be separated. A short response, a detailed conversation, a link click and a payment create different exposures and require different action.
Ordinary conversation can reveal useful detail
A name, role, location, availability or explanation can help the sender adapt the next message and sound more relevant.
Engagement can create apparent familiarity
A continuing conversation may feel less like an unexpected message, even though the sender has not been independently verified.
The next request may carry the real risk
The contact may move from harmless conversation to a link, code, document, payment, investment, emergency or account-security instruction.
Consequences and movement
What may happen next
Use the highest-risk action that actually happened. Do not assume the worst, but do not overlook information, access or money that moved after the first reply.
You replied only
End contact, block and report. Keep the message if it may be needed as evidence.
You disclosed sensitive information
Move to the information-sharing response and protect the affected bank, account, identity record or document.
You clicked or installed something
Follow the link or device branch. A click, download, permission or installation changes the technical response.
You sent or approved money
Contact the bank or payment provider at once and preserve the transaction details.
Practical response
What you should do
Close the conversation first. Then reconstruct what happened without returning to the sender for reassurance, interpretation or recovery.
- Stop the exchangeDo not explain that you have identified the scam, challenge the sender or wait for a final response. Further contact gives more opportunities to adapt.
- Block and report the routeUse the messaging service’s block and report controls. For suspicious SMS in the UK, forward the text to 7726. App messages should also be reported inside the app.
- Record what you disclosedNote any names, contact details, account facts, images, codes, documents, links, payments or permissions shared during the conversation.
- Choose the matching protectionUse account, identity, device or payment recovery only where that exposure happened. A reply alone is not evidence that every system is compromised.
- Distrust the follow-upExpect a new sender, number or supposed investigator to refer to the original message. Accurate details from the exchange do not prove the later contact is genuine.
- Preserve evidence of harmKeep screenshots, usernames, numbers, dates and requests if money, threats, identity misuse or persistent targeting is involved, then use the appropriate reporting route.
Look more closely
A reply gives the sender useful feedback
Responding confirms that the contact channel is active and can reveal attention, language and personal concerns. That information may be used to make later messages more relevant and convincing, even when nothing valuable was shared initially.
An unexpected message reaches an active channel.
The reply confirms attention and may reveal useful context.
The next message becomes more relevant, urgent or emotionally specific.
Conversation history makes the sender appear known or confirmed.
Ending contact prevents the sender from using further feedback to direct action.
Selected history
Historical cases and lasting lessons
Conversation-led messaging scams
Scam messages often begin with a simple question, warning or mistaken identity before the sender introduces the consequential request.
Lasting lesson: The opening message may test engagement rather than contain the final scam instruction.
Network and app reporting
UK users can report suspicious SMS to 7726, while messaging apps provide their own blocking and reporting controls.
Lasting lesson: Reporting should close the channel and contribute to prevention without requiring continued engagement.
Transferable understanding
Patterns over time
Low-risk openings create high-value feedback
A vague message can reveal whether a person responds before the sender invests in a tailored story.
Familiarity is accumulated
Several ordinary exchanges can reduce the psychological distance that an unexpected request would normally create.
Doubt can become engagement
Replying to test, expose or challenge the sender may keep the person inside the scammer’s controlled conversation.
Consequences branch by action
Contact, information, access and payment are different events. Each requires its own proportionate response.
Plain-language answers
Common questions
Can replying infect my phone?
A normal text reply does not by itself confirm that the phone is infected. The risk changes if you also opened a link, downloaded a file, installed software or granted a permission.
Should I tell the sender I know it is a scam?
No. End contact, preserve what is needed and report through the network or app rather than continuing the exchange.
Should I change my phone number or email address?
Usually not after one reply. Start with blocking, reporting and stronger filtering. Consider a larger change if contact becomes persistent, threatening or difficult to control.
What if I gave my name or another ordinary detail?
Record it and expect more targeted contact. Apply stronger action if the information can authenticate you, access an account, support identity misuse or enable payment.
Match the response to what happened after the reply
Block and report the contact. If the exchange progressed into a link, software, sensitive information, money or threats, follow that dedicated response and keep the conversation as evidence.
Scamology Insights
Treat engagement as feedback, not proof of harm
These learning resources can help separate the contact that opened the first contact from the later actions that created information, access or payment risk. Links are intentionally withheld in this production version.
Guided route 2 · Step 1 of 4
Continue your route
The next guide follows directly from this one.
Continue understanding
Explore related guidance
Evidence and currency