Fraudsters are using specialist software which alters the sender ID on the message so that it appears as if it’s come from NatWest, adding it to any existing message threads on the recipient’s phone.
https://www.actionfraud.police.uk/news/fake-natwest-text-messages-appearing-in-message-threads-jan18