WHAT DO I DO :/

Last month, my friend and I were PG hunting and shortlisted two places where we submitted our details and paid a deposit, intending to move in later. Due to some circumstances, we've delayed our move. Today, I got a random "Hi dear, Happy New Year" message from an unknown number. I’ve lost many contacts recently, so I assumed it might be a college acquaintance, judging by the familiar WhatsApp profile picture. However, the person went on to say they’re a resident of the PG we signed up for and mentioned that I haven’t moved in yet. When I asked how they got my number, they claimed to have taken it from the forms we filled out. I immediately reported this to the hostel in-charge, but I doubt any real action will be taken. What should I do now?