Caller ID spoofing: why the number you see may be fake

You receive a call and your screen shows the name of your bank, or a number with the same area code as yours. It looks trustworthy, but it might not be at all. Caller ID spoofing lets a scammer display any number they like on your phone, including one you recognise. In this guide we explain how it works, why it is technically possible and, above all, what to do to avoid falling for it.

What caller ID spoofing is

The caller ID is the information your phone shows when someone calls you: the number and, sometimes, an associated name. Spoofing means falsifying that information so that a number different from the real one appears.

Put simply: the scammer makes your screen show the number they choose, not the number they are actually calling from. It could be your bank's, that of a public body, or even a number very similar to your own.

The practical consequence is important: the number you see does not prove who is calling. It is a clue, not proof.

Why it is technically possible

You don't need to be a telecoms engineer to understand it. The key lies in how telephony was designed.

• When a call is made, the originating number travels as just another piece of data within the signalling, alongside the call itself.
• On traditional networks, that data is trusted without being verified end to end. The destination network shows it exactly as it receives it.
• With internet telephony (VoIP) and certain phone systems, configuring which number appears as the origin is as easy as filling in a field. There are services designed for legitimate uses (for example, so that a company always shows its customer service number) that scammers exploit for fraudulent purposes.

In other words: the telephone network was born based on trust, not on verification. Faking the displayed number does not require "hacking" anything; it is enough to manipulate that piece of information. That is why spoofing is so common.

There are technical initiatives to authenticate the origin of calls and reduce this problem, but their roll-out is uneven and still does not prevent every case. In the meantime, caution remains your best defence.

The most common cases

Spoofing is used to lend credibility to a deception. These are the typical scenarios:

Impersonating your bank

The scammer makes the number (or the name) of your bank appear. They warn you of a "suspicious charge" or "unauthorised access" and, exploiting the urgency, try to get you to hand over passwords, SMS codes, or to move money to a "safe account". It is a form of vishing: voice fraud combined with the pressure of the moment.

Impersonating an official body

The number of the tax agency, social security, the police or your electricity company appears. The message usually includes threats (a fine, a service cut-off, legal proceedings) so that you act without thinking.

Neighbor spoofing: your own local area code

A very effective variant involves showing a number with the same area code as yours, or very similar to it. Because it looks like a neighbour, a nearby shop or someone you know, you are more likely to pick up. This is known as neighbor spoofing, and it is used mainly in mass campaigns of commercial and fraudulent calls.

Impersonating a known contact

In more targeted cases, the spoofed number may be that of a company you work with or that of a trusted contact, so that you let your guard down from the very first second.

Why you shouldn't rely on the number alone

The conclusion of all the above is straightforward: a familiar number on screen does not guarantee that the caller is who they say they are. Recognising your bank's number does not mean it is your bank. The caller ID may have been falsified, so treating it as proof of identity is precisely the mistake scammers are counting on.

Nor does it help to impulsively call back the number that appears: if it has been manipulated, you could end up dialling a number that is not the official one.

The golden rule: verify the call yourself

If a call asks you for data, money or urgent actions, hang up and verify on your own, never with the details offered by the caller.

1. End the call calmly. A legitimate organisation won't mind you verifying.
2. Look up the official number on your own: on the back of your bank card, in the official app, on the bill or on the body's verified website.
3. Call that official number yourself and ask whether they really were trying to contact you.

This simple reversal —being the one who initiates the call to the official channel— breaks the chain of fraud, because you no longer depend on the number the scammer chose to show you.

What to do

Beyond the golden rule, it's worth being clear about these habits:

• Never give out passwords, login details or one-time codes (OTP) over the phone. No serious organisation will ask for them that way.
• Be wary of urgency. "Do it now or something bad will happen" is the most common tactic to stop you reasoning.
• Don't move money or install apps because someone tells you to over the phone, even if it seems to be your bank.
• Don't confirm personal data ("to verify your identity, give me your ID number and your address"). Fraud feeds on those details.
• If in doubt, hang up and call back yourself on the official number. If there is no such incident, you'll know it was an attempted scam.
• Make a note of what happened (date, time, what they asked for) in case you need to report it later.

If you want to dig deeper, you'll find detailed steps in our guide on what to do about a suspicious call, and tips for identifying who is contacting you in how to find out who is calling you.

Conclusion

Caller ID spoofing is neither magic nor an isolated glitch: it is a direct consequence of how telephony was designed, based on trust rather than verification. That is why the number you see on screen should never be your only safety signal. Keep calm, don't give out sensitive data and, at the slightest doubt, be the one who verifies by calling the official channel.

Has a number you're suspicious of called you? Check it and warn others: look up or report any number in our spam number directory and help make sure the next person doesn't fall for the trick.