suspicious user text changed