"Hi Mom" Text Scam Uses Two-Number Handoff to Target Parents Before Money Request

A text message crafted to mimic a child's emergency is circulating in 2026, combining a plausible excuse — a phone dropped in a sink — with a deliberate two-step redirect designed to pull recipients away from their saved contacts and into an unverified conversation before any financial demand surfaces. The scam, detailed by CyberGuy.com, requires no unusual link and makes no immediate money request, relying instead on the speed at which parents respond when a child appears to need help.

The Two-Number Setup Is the Central Mechanism

The message arrives from one unknown number and instructs the recipient to reply to a second, different unknown number — a handoff CyberGuy.com identifies as the defining feature of the scheme. That redirect moves the target into a fresh conversation thread, stripping away prior context and giving the scammer time to adjust the story based on each response. The message avoids using a real name, addressing only "mom," which makes mass distribution practical while still reading as personal to any parent who opens it. The absence of a name is a functional choice, not an oversight.

From Family Panic to Payment Demand

Once the target is engaged in the second conversation, the request escalates. Scammers have asked for money toward a replacement phone or to cover a bill because a banking app was unavailable. Payment methods cited by CyberGuy.com include Zelle, Venmo, Cash App, gift cards, and cryptocurrency — channels that move quickly and, in some cases, cannot be reversed. A separate variant involves requesting a one-time security code, framed as necessary to restore the phone or verify an account. CyberGuy.com warns that sharing such a code can open a scammer's path into bank accounts, Apple ID, Google accounts, or phone carrier accounts.

Verification and Reporting Steps

CyberGuy.com recommends calling the family member using a number already saved in contacts — not any number appearing inside the suspicious message — before replying. If the real person does not answer, a second trusted channel should be tried. A specific personal question, one a stranger could not answer from social media, can further confirm identity. Responding even to say the sender has the wrong number can confirm an active phone number and invite further scam attempts.

iPhone users can forward suspicious messages to 7726, which spells SPAM on a dial pad. Android users can block the sender and report the conversation as spam within Google Messages. Anyone who already responded should focus on ending the exchange, securing accounts, and preserving records before any follow-up pressure arrives. A global fraud enforcement action linked to scams in this category resulted in 276 arrests, according to CyberGuy.com, indicating coordinated enforcement across jurisdictions.