It can start with a random text from someone you don’t know. Then the scammers have a playbook, and will do anything to get you to trust them — before they pounce.