Caller ID spoofing
The caller deliberately falsifies the number shown on your caller ID display to disguise their identity, often imitating a local number, a government agency, or a well-known company.
Spoofing is cheap because caller ID was never designed as authentication: the originating system simply asserts a number, and legacy networks pass it along unchecked. The Truth in Caller ID Act makes fraudulent spoofing illegal with penalties up to $10,000 per violation, and the FCC's STIR/SHAKEN framework now cryptographically signs calls on IP networks — but international gateways and older equipment still leak unsigned traffic, which is why spoofed calls persist. The practical defense is procedural, not technical: treat the display as a hint and verify through numbers you find yourself.
How to recognize it
- The displayed number looks local or familiar, but the caller is a stranger or a recording
- A callback to the displayed number reaches someone who never called you
- The caller claims to be from an agency or company but pressures you for personal data
What to do
- Do not rely on caller ID alone to verify who is calling
- Hang up and call the organization back on its official published number
- File a complaint with the FCC
Where to report
Sources
FAQ
What should I do first if I suspect a caller id spoofing call?
Hang up without pressing anything or confirming any details. Do not rely on caller ID alone to verify who is calling. Then report it through the channels listed below.
I already gave the caller money or information — now what?
Act on the money first: contact your bank or card issuer immediately, and if you paid by gift card, call the card company to try freezing the balance. Then file a report at ReportFraud.ftc.gov and, if identity data leaked, follow the recovery plan at IdentityTheft.gov.
Does the number that called me identify the scammer?
Usually not — the display is routinely spoofed. Report the number anyway: combined with time and content, it still helps investigators map calling campaigns.