The scam usually starts with a short, casual message that appears to come from someone the victim already knows and trusts.