How to read a number's risk signals on NoCall

When you look up a number on NoCall you don't simply see a "good" or "bad" label. You see several signals: a score, a danger level, a dominant category and other people's comments. Knowing how to read them together is what lets you decide in seconds whether to pick up, ignore or block that call.

This article teaches you to interpret each of those signals without getting confused. It's not magic or a closed verdict: it's a snapshot of a number's reputation, built from community data and processed with a public methodology. If you want the technical detail of how it's calculated, you'll find it at /metodologia. Here we focus on the practical side: what each thing means and what you should do with it.

What signals does NoCall show about a number?

When you look up a number in the directory, NoCall gathers several pieces of information that you should view as a whole, not in isolation. These are the main ones:

• The number of reports: how many people have flagged that phone as problematic. It's the foundation of everything. A number with hundreds of reports carries far more weight than one with two.
• The dominant category: NoCall groups reports into types such as scam (SCAM), harassment (HARASSMENT), debt (DEBT), telemarketing (TELEMARKETING), generic spam (SPAM), surveys (SURVEY) or other (OTHER). The category tells you what kind of nuisance or threat it is, not just how much.
• Community comments: anonymous accounts from people who received the call. This is the context no number can summarise: "they asked me for my bank code", "they hung up on the first ring", "they spoke to me on behalf of the post office".
• The date of the last report: a signal of activity. A number with many reports but all from two years ago is not the same as one reported this week.
• The carrier and the prefix: which company the number's range belongs to and what type it is (mobile, landline, freephone, premium rate). This gives you clues about the type of campaign.

The key point is that no single signal is a verdict on its own. A number with no reports isn't necessarily safe; it simply hasn't been flagged yet. And a number with a couple of telemarketing reports is very different from one with dozens of scam reports.

How is a number's reputation built?

NoCall doesn't invent a phone's reputation. It builds it by adding up what the community reports and what official sources record. The full methodology is documented at /metodologia, but the principle is simple: more recent reports, from more different people, and from more serious categories = higher risk.

Three factors move the needle:

1. Volume. How many reports the number has accumulated. Ten different people flagging the same phone is a solid signal; just one could be a mistake or a personal grudge.
2. Recency. When those reports were made. Recent activity carries more weight because spam campaigns rotate numbers constantly. A number "burned" months ago may be inactive today.
3. Severity of the category. Not all nuisances are equal. An insistent sales call is annoying; one impersonating your bank is an attempted robbery. The dominant category guides how you read it.

On top of this comes the context of the number itself: if it belongs to a premium-rate prefix (such as 803, 806 or 807) or to an international range used in wangiri scams, the risk of cost or deception rises by design, even with few reports. That's why it's worth cross-checking the number's profile with what you know about its prefix and its carrier.

How do I interpret the danger level and the category?

The danger level is a visual summary that combines volume, recency and severity into a single quick read. But the summary doesn't replace the detail. Here's how to read each dominant category and what reaction makes sense:

The category tells you how to react. A number flagged mostly as SCAM demands maximum caution: there the risk isn't wasting time, it's losing money or credentials. A TELEMARKETING number is annoying but rarely dangerous; just block it and, if legal sales offers reach you, consider the Robinson List versus blocking in an app.

To understand which categories and patterns dominate in Spain right now, you can compare the profile with our data-driven breakdown of phone spam and with the Q2 2026 threat report.

Why are comments worth as much as the score?

The score gives you the how much. The comments give you the what and the how. They are the part of the profile that most often decides whether a call is genuinely dangerous for you specifically.

When you read the comments, watch for these patterns:

• Mention of specific brands. If several comments say "they claimed to be from the post office" or "they posed as my bank", you're looking at an impersonation campaign. Learn how to check whether a call or SMS from your bank is real or whether a notification from the tax office or social security is legitimate.
• Requests for data or codes. "They asked me for my PIN", "they wanted the code from the SMS". This is the signature of an attempt to steal credentials or of a SIM duplication (SIM swapping). No legitimate bank or institution asks for that by phone.
• Calls that hang up instantly. "It rang once and hung up". This is the classic pattern of flash calls and ping calls or of wangiri fraud: they want you to call back a premium-cost number.
• Mention of parcels. "They told me I had a parcel being held". This usually accompanies parcel scams with a fake post office SMS.
• A strange voice or a "relative in trouble". If someone describes a voice that sounded "odd" asking for urgent money, it could be AI-cloned voice.
• Links or QR codes. Comments mentioning a link received by SMS point to quishing with QR codes and links.

One important detail: consistency between comments carries more weight than an isolated comment. If fifteen different people describe the same script ("a supposed Microsoft technician asking you to install AnyDesk"), the signal is very reliable. If there's a single angry comment with no context, take it with a pinch of salt. Behind many of these coordinated campaigns there is a fraudulent call centre operating like a company, with repeated scripts that you recognise precisely by their uniformity.

What do I do based on what I see? A four-step routine

You don't need to analyse every number like an expert witness. A short routine covers 95% of cases. Follow this order:

1. Look at the volume and recency. Many reports and recent ones? Treat it as hostile until proven otherwise. Zero reports? Don't drop your guard: it means it's new or rarely seen, not that it's safe.
2. Read the dominant category. It tells you the type of threat and, with that, the level of caution. SCAM and HARASSMENT demand maximum care.
3. Scan the comments. Look for the patterns above: impersonated brands, requests for data, instant hang-ups. This is where you confirm or rule out the specific risk.
4. Cross-check the prefix and carrier. An unknown international prefix or a premium-rate one adds cost risk. Check it at /prefijos and /operadores.

If after these four steps something doesn't add up, apply the golden rule of all phone security: hang up and verify it yourself through an official channel you know. Never through the number that called you nor through a link you were sent. If the call claimed to be from your bank, ring the number on the back of your card. If it claimed to be from the tax office, log in yourself to the e-Office with Cl@ve.

And if the number has no reports yet?

This is a common situation and the number-one source of confusion. A number with no history is not a guarantee of safety. Spam campaigns rotate numbers daily precisely to arrive "clean" on your screen. In that case, ignore the absence of data and judge the call by its behaviour: are they pressuring you? Are they asking for data or money? Is there artificial urgency? Those signals are worth more than any score when there's no history.

And if you receive a call from a number with no reports and it turns out to be suspicious, report it. Your report is the first signal the next person will see. The methodology only works if the community feeds the data.

Can the signals be wrong?

Yes, and it's worth knowing so you don't read them like an oracle. There are two sources of error you should keep in mind:

• False positives. A legitimate company number can accumulate telemarketing reports because many people find it annoying, even though it isn't fraudulent. The category helps you tell them apart: annoying TELEMARKETING ≠ dangerous SCAM.
• False negatives. Caller ID spoofing lets a scammer display on your screen a number that isn't theirs, even a legitimate one. That's why a "clean" number in the profile doesn't rule out that the specific call is a fraud: the attacker may be using someone else's number. The defence is always the same: verify through your own channel.

Understanding these limits is what separates using the tool well from relying on it blindly. NoCall gives you the best possible snapshot of a number's reputation with the available data. The final decision, especially when money or data is at stake, is always one you confirm yourself through a trusted channel.

If you want to go deeper into the specific mechanisms, there are dedicated guides at /guias, the detail of the calculation at /metodologia, and up-to-date trends at /tendencias and the /blog. To understand which carriers and prefixes concentrate the most spam, see the carriers with the most spam numbers in Spain and the most reported mobile prefixes.

In short

Reading a number's profile on NoCall means cross-referencing four signals: volume of reports, recency, dominant category and community comments, with the context of prefix and carrier in the background. None rules alone. Volume and recency tell you how much to worry; the category, what type of threat we're talking about; the comments, what exactly they'll try on you. And when something doesn't fit, you hang up and verify on your own.

That combined reading is what turns a screen showing an unknown number into an informed decision in seconds. If you've received a suspicious call, look it up and, above all, report it at /numeros-spam. Every report improves the signal the next person will see. That's how the methodology works, and that's how the community protects the community.