Is this sales call legal?

Purpose

Since 17 October 2026, sales calls in Spain may only come from numbers starting with 400. Check whether a call that tried to sell you something followed the rule.

Requirements

Anyone can read these guides, no account needed. Some tools require Pro, as indicated in each guide.

Since 17 October 2026, companies in Spain may only make sales calls from nine-digit numbers that start with 400. Type the number that called you to see whether a sales call from it follows the rule.

How to use it

1. 1

   Open tool

2. 2

   Since 17 October 2026, companies in Spain may only make sales calls from nine-digit numbers that start with 400. Type the number that called you to see whether a sales call from it follows the rule.

3. 3

   Check

4. 4

   Read the available fields alongside their limitations. An empty result does not prove safety or identify a person.

Synthetic example

+34 400 000 000

Interpret the result

Read the available fields alongside their limitations. An empty result does not prove safety or identify a person.

Allowed for sales calls: 400 is the range for commercial calls. The call is legal, but you can say no and ask them to remove you from their list. You can’t call a 400 back.

Not allowed for sales calls: Sales calls in Spain may only come from a 400 number, and since June 2025 not even customer service may call from a mobile. You can report it.

Not allowed for sales calls: A landline can be used for customer service, but not to sell you something: sales calls must come from a 400 number. You can report it.

Not allowed for sales calls: 800 and 900 numbers are for customer service. A sales call must come from a 400 number.

Special-rate number: don’t call back: It is not a sales range and calling it costs more than a normal call. Be wary of any message that asks you to call it.

Short number: Short numbers are used for customer service and public services, not for sales calls.

Number from another country: Spain’s 400 rule covers the numbers that Spanish operators assign, so we can’t judge this call by it. If a foreign number tried to sell you something, don’t share any data and report it.

Limitations

Indicative information from published numbering plans. It describes the type of number, never the person or company behind it.

Troubleshooting

If the input is invalid, check its format and country. Retry connection errors; respect the waiting period when a limit is reached.

Enter a valid phone number or prefix.

We couldn’t check it right now. Please try again in a moment.

Use with the API

Classifies a Spanish number as a 400 commercial line, mobile, geographic, free, special cost, short or foreign. ES only.

Send the JSON body to the tool's own route, or to POST /v2/tools with the tool field added. Both routes return the same result.

POST https://api.nocall.io/v2/commercial-400
POST https://api.nocall.io/v2/tools  {"tool":"commercial-400","phone":"+34400000000","country":"ES"}

REQUEST_ID="$(uuidgen)" && [ -n "$REQUEST_ID" ] &&
curl --request POST 'https://api.nocall.io/v2/commercial-400' \
  --header "Authorization: Bearer $NOCALL_API_KEY" \
  --header 'Content-Type: application/json' \
  --header "Idempotency-Key: $REQUEST_ID" \
  --data '{"phone":"+34400000000","country":"ES"}'

import json
import os
import urllib.request
import uuid

api_key = os.environ.get('NOCALL_API_KEY')
if not api_key:
    raise SystemExit('Set NOCALL_API_KEY')

request = urllib.request.Request(
    'https://api.nocall.io/v2/commercial-400',
    method='POST',
    data=json.dumps({'phone': '+34400000000', 'country': 'ES'}).encode(),
    headers={
        'Authorization': 'Bearer ' + api_key,
        'Content-Type': 'application/json',
        'Idempotency-Key': str(uuid.uuid4()),
    },
)
with urllib.request.urlopen(request, timeout=30) as response:
    result = json.load(response)
print(result['data']['result'], result['meta']['unitsCharged'])

import { randomUUID } from 'node:crypto';

const requestId = randomUUID();
const apiKey = process.env.NOCALL_API_KEY;
if (!apiKey) throw new Error('Set NOCALL_API_KEY');

const response = await fetch('https://api.nocall.io/v2/commercial-400', {
  method: 'POST',
  headers: {
    Authorization: 'Bearer ' + apiKey,
    'Content-Type': 'application/json',
    'Idempotency-Key': requestId,
  },
  body: JSON.stringify({ phone: '+34400000000', country: 'ES' }),
});
const result = await response.json();
if (!response.ok) throw new Error(result.error?.code ?? 'request_failed');
console.log(result.data.result, result.meta.unitsCharged);

{
  "data": {
    "tool": "commercial-400",
    "result": {
      "verdict": "commercial_400",
      "prefix": "400"
    }
  },
  "meta": {
    "requestId": "req_example",
    "unitsCharged": 1,
    "usage": {
      "periodStart": "2026-10-01",
      "unitLimit": 20,
      "unitsUsed": 3,
      "unitsRemaining": 17
    }
  }
}

• API reference ↗

Frequently asked questions

Related guides

• How much does it cost to call back?
• Who is calling me?