News/Cancellations
Scam using Pastor Rob's name --- a few people received a text saying it was from me, asking them to text me back. It is not from my number, so don't respond. I have not been compromised, but here is a summary of what happens in this kind of scam...
Why this doesn’t require your contacts to be breached
Scammers generally do not need access to your phone, email, or address book to impersonate you. According to the FTC and FBI, most smishing campaigns work by acquiring phone numbers in bulk from:
Data brokers
Marketing lists
Past data breaches
Public directories
Sequential number generation (literally texting every number in a range)
The FBI notes that impersonation scams often target people connected to a public figure or community leader, even without any technical compromise — the attackers simply guess who might respond.
As a pastor, your name is publicly associated with a congregation. That alone is enough for scammers to:
Pull publicly listed church member directories, newsletters, or social media interactions.
Guess that people in your community might respond to a message “from you.”
Send texts to numbers they already have from unrelated sources.
None of this requires breaching your phone or accounts.
How scammers make it look personal
Scammers often craft messages like:
“Hey, I need a favor.”
“Can you text me back? It’s private.”
“I need help urgently.”
These are intentionally vague but emotionally triggering. The FBI describes this exact tactic: establishing rapport, then trying to move the conversation to another app or extract information or money.
They rely on social engineering, not technical access.
Does this mean your phone or accounts were hacked?
Based on what you described, no evidence suggests your device or accounts were compromised. The pattern matches broad impersonation campaigns, not targeted breaches.
Signs of a real compromise would include:
Messages sent from your actual number
Unauthorized logins to email or social media
Contacts receiving messages that include personal details only you would know
Your own device showing malware symptoms
You haven’t described any of these.
Why your members were targeted specifically
This is the part that feels personal, but it’s usually not.
Scammers often target:
Churches
Nonprofits
Small communities
Local leaders (pastors, coaches, teachers, administrators)
Because these groups tend to trust each other and respond quickly to perceived needs.
Your name is publicly associated with Trinity Lutheran Church, so scammers can easily impersonate you without accessing your phone.
What you should do next
1. Tell your congregation this is a known scam
A simple announcement or email warning people not to respond to unexpected “urgent” texts from you.
2. Encourage members to block and report the number
The FTC recommends forwarding scam texts to 7726 (SPAM).
3. Check your own accounts just to be safe
Not because they’re likely compromised, but because it’s good hygiene:
Ensure your phone OS is up to date
Check email security logs
Enable two-factor authentication everywhere
4. Consider a public note on your church website or Facebook page
Something like:
“I will never ask for gift cards, urgent favors, or private help via text. If you receive such a message, it is a scam.”
This reduces future effectiveness of impersonation attempts.
I have checked my accounts and my phone is up to date and I have two factor authentication on everything. I have know other pastors who have had this happen to them... Suffice it to say, I will call if I ever need to discuss something private or need help. I will not send a random text out of the blue.