The Marketplace listing has your name on it. That is the whole point.

A stranger messages you on Facebook. "Is this still available?" Underneath is a screenshot of a Marketplace listing, and the seller's name is your name. The profile photo is somebody else entirely.

The obvious reaction is the one the scammer is counting on. You reply to say that is not me, somebody is using my name, and the conversation has started. Malwarebytes, which pulled the campaign apart this week, calls this a conversation lure: hand a person something they feel compelled to correct and the opening message does all the work. The listing is fabricated. The attacker simply had a name sitting next to a phone number in a breach dump, and with a bit of automation that pairing turns into thousands of personalised messages for almost no effort.

What does a reply buy them? Confirmation that a real person is on the end of that number, which makes it worth more to the next buyer, and an open channel for whatever comes next. The follow-up is usually a link to a sign-in page, or a request to read out a code that has just arrived by text. Facebook's own guidance on Marketplace scams is blunt about this: someone sending you a link that needs your username and password is a scam, full stop.

So do not reply, not even to deny it. Report the profile from inside the app and move on. If you did follow a link and the PC has felt odd since, Tendvane's safety check will list the unwanted software that has turned up on it.