What is phone spoofing?
Definition
Phone spoofing is when a caller deliberately falsifies the information shown on your caller ID so the call looks like it comes from a different number, person or organization than it really does.
- Category
- Scams
- Also called
- caller ID spoofing, number spoofing
- Last updated
Your phone shows whatever caller information the network passes along, and a caller can change that information. The FCC describes spoofing as deliberately falsifying what appears on your caller ID display to disguise who is calling.
Scammers use it because a familiar number gets answered. A common version is neighbor spoofing, where the call shows your own area code and the first digits of your number so it looks local. Others copy the number of a bank, a government agency or a company you do business with. If you call the number back, you reach the real owner of that number, not the scammer.
Spoofing isn't always illegal. The FCC points to legitimate uses, such as a doctor calling from a personal phone while showing the office number, or a business displaying its main line. In the US, the Truth in Caller ID Act makes it illegal to knowingly send misleading or inaccurate caller ID information with the intent to defraud, cause harm or wrongfully obtain anything of value.
Spoofing vs. related terms
- Vishing is the scam itself: a phone call that tricks you into handing over information or money. Spoofing is often the disguise it uses.
- Smishing is the same trick by text message, and texts can show spoofed sender names too.
- Spam calls are unwanted calls of any kind. They can come from a real number or a spoofed one.
The practical problem is that caller ID can't be trusted as proof of who is calling. A name and number on the screen tell you what the caller chose to show.
How to protect yourself
- 1
Don't trust the number on the screen
If a call claims to be your bank, a utility or a government agency, hang up and call the organization back using the number on your card, your bill or its official website.
- 2
Don't give out codes or account details
A real organization won't ask you to read out a one-time code, a password or a full card number on a call you didn't start.
- 3
Let unknown numbers go to voicemail
Scammers want a live person. A real caller will leave a message you can check afterward.
- 4
Cut down how many callers have your number
Spoofers and scammers often start from lists that include your name and phone number. Serus finds where your phone number and address are listed on data brokers and people-search sites and requests removal, which shrinks the pool of lists you appear on.
See where your personal data is exposed
Serus finds it on data brokers and people-search sites and removes it.
Frequently asked
Is phone spoofing illegal?
Not always. In the US, spoofing is illegal when it's done knowingly with intent to defraud, cause harm or wrongfully obtain something of value, under the Truth in Caller ID Act. Some uses, like a business showing its main number, are allowed. Rules differ by country.
Why does a spam call show my own number?
That's usually neighbor spoofing or number spoofing. The caller picked a number that looks like yours so you're more likely to pick up. It doesn't mean your phone or account was hacked.
Can I tell if a call is spoofed?
Not reliably from the caller ID alone. Treat any unexpected call that asks for money, codes or personal details as suspect, hang up, and contact the organization through a number you looked up yourself.
What should I do if I got a spoofed call?
Don't call back the number shown. If you shared information or paid, contact your bank or card issuer right away. You can also report unwanted calls to the FCC.
Sources
Something wrong or out of date? Tell us and we'll re-check it.