Caller ID Spoofing: Why Scam Calls Show Real Numbers
The number on your screen can be faked. Once you know that, many scam calls become much easier to spot.
By Siddharth ShankarUpdated October 18, 2026Caller ID spoofing is when a caller deliberately fakes the number shown on your phone. Scammers use it to look local or to look like your bank or a government agency. Do not trust caller ID on its own. Hang up and call back using the number on your card, statement or the official website. Never share codes, passwords or account numbers with an unexpected caller.
Scammers start with details that have already leaked. Is your email one of them?
Free · About 30 seconds · No sign-up · Email not stored
Many people still trust caller ID. If the screen says it is the bank, it must be the bank. Scammers rely on exactly that. Faking the number that appears on your phone is cheap and easy, and it is a key part of many bank, police and tax scams.
What caller ID spoofing is
The Federal Communications Commission defines spoofing as a caller deliberately falsifying the information sent to your caller ID display to hide who they are. The call can come from anywhere in the world while your phone shows a local number, a well-known company or a government office.
Two patterns are common:
- Neighbour spoofing. The number looks local, often with the same first digits as your own, so you are more likely to answer.
- Impersonation. The number matches a real bank, card company, health insurer, charity or agency you already trust.
Criminal services have even sold spoofing to fraudsters at scale. Our report on the iSpoof case shows how one site made scam calls look like they came from real banks.
Why scammers spoof real numbers
A familiar number lowers your guard. Combined with a few personal details, such as your name or the last digits of a card, a call can feel completely genuine. Those details usually come from data breaches and people-search sites, which is why how scammers get your phone number matters here too.
Your best defence is knowing what scammers may already have. Check your email free.
Free · About 30 seconds · No sign-up · Email not stored
How to protect yourself
1Do not trust caller ID alone
A real-looking number proves nothing. Judge the call by what the caller asks you to do.
2Hang up and call back
If a caller says they are from your bank or an agency, end the call and phone the number on your card, your statement or the official website. The FCC recommends exactly this.
3Never share sensitive details
Do not give account numbers, Social Security numbers, passwords or one-time codes to an unexpected caller.
4Avoid pressing buttons
The FCC advises against pressing a key to stop calls and against answering yes or no questions.
5Lock your voicemail
Set a voicemail password. The FCC notes spoofed calls can be used to access voicemail.
6Turn on call blocking
Ask your phone company about call-blocking tools and labelling.
What if your number is being spoofed?
Sometimes people call you back angry about calls you never made. That usually means a scammer is spoofing your number. You did not do anything wrong and your phone is not necessarily hacked. You can file a complaint with the FCC in the US. Changing your number is rarely needed, because scammers tend to rotate through many numbers.
What phone networks are doing
The FCC requires voice providers to use a caller ID authentication system called STIR/SHAKEN on internet-based networks, and allows phone companies to block likely robocalls by default. These help, but they do not catch everything, especially calls routed from overseas. Your own caution is still the strongest defence.
Text messages can be spoofed too
The same trick works with text messages. A scam text can appear inside a real conversation thread from your bank or delivery company, because the sender name was faked. Treat links in unexpected texts the same way you treat unexpected calls: do not tap, and go to the official app or website yourself.
Related protections
Registering with the National Do Not Call Registry stops legal sales calls, but not spoofed scam calls. In the UK, the Telephone Preference Service does a similar job.
Sources
- FCC: Caller ID spoofing (definition, neighbour spoofing, safety tips, call blocking, STIR/SHAKEN, complaints)
Frequently asked questions
Is caller ID spoofing illegal?
In the US, spoofing is illegal when it is done to defraud, cause harm or wrongly obtain something of value. Some uses, such as a business showing its main number, are allowed.
Can a scammer show my bank’s real number?
Yes. That is exactly what spoofing does. Hang up and call the bank back on a number you know is genuine.
Why do people call me about calls I never made?
Your number is probably being spoofed by a scammer. It does not usually mean your phone is hacked.
Do call-blocking apps stop spoofed calls?
They catch many, but not all. Treat any unexpected request for money or codes as a scam whatever the screen shows.
Does the Do Not Call Registry stop spoofed calls?
No. It only covers legal sales calls. Scammers ignore it.
See if your email has already leaked
- Checks your email against known data breaches
- Shows which sites leaked it, when, and what leaked
- We do not store the email you check
Get alerted when your email leaks
Every NordVPN plan includes Dark Web Monitor, which alerts you if your email appears in new leaks.
See NordVPN →Affiliate link. We may earn a commission at no extra cost to you.
Prefer a one-time report first? Scan My Shadow, our sister service, $9.99.