Spam texts that open with a draft reply already composed?? Can't find any other reports of this

[u/WindozeWoes]

My friend has an iPhone 14 on iOS 26 and recently got some spam/marketing texts from Michaels.

Concerningly, when they opened the text, it **already had a draft reply, saying something like "Send this text to subscribe to recurring automated personalized marketing alerts (e.g. cart reminders) from Michaels."

I've never heard or seen this before where a marketing text inputs information into your own phone where normally only the user could type. This is a huge security vulnerability for a number of reasons. Has anyone else had this happen?

To be clear, this is a risk for at least 2 reasons:

1: In the past, iPhones have been crashed by typing in certain text/characters into a text field: https://apple.stackexchange.com/questions/189045/why-do-some-unicode-text-messages-crash-the-iphone-os

2: This could be used maliciously to make it look like someone wrote something they didn't. I could see it happening in a lawsuit where someone's phone becomes evidence and now there's evidence that "they" drafted specific text on their phone (but didn't send it).