Caller ID spoofing explained: why the number on your screen proves nothing
Also available in: العربيةБългарскиČeštinaDanskDeutschΕλληνικάEspañolSuomiFrançaisעבריתहिन्दीHrvatskiMagyarBahasa IndonesiaItaliano日本語한국어NorskNederlandsPolskiPortuguês (Brasil)PortuguêsRomânăSlovenčinaSvenskaไทยTürkçeУкраїнськаTiếng Việt简体中文繁體中文
Your phone shows “Bank” or the number of your daughter. It feels like proof. It is not: caller ID is information supplied by the calling side, and in many networks it is passed along without being checked.
How spoofing works
Internet telephony (VoIP) lets the caller set the number that is presented to the recipient. Legitimate uses exist – a company showing its main line instead of an agent’s extension – but the same feature lets scammers display any number they want, including emergency services, banks or your own contacts.
What networks do against it
- STIR/SHAKEN (USA, Canada): carriers digitally sign the caller ID and pass an attestation level along with the call. This makes spoofing harder within participating IP networks, but it does not cover every route, and it says nothing about the caller’s intent.
- National rules: Germany, for example, has required operators since December 2022 to suppress German caller IDs on calls arriving from abroad (mobile roaming excepted). Other countries have introduced similar measures.
- Carrier spam labels: networks and phone makers add “spam likely” warnings based on reputation data.
All of these reduce mass spoofing. None of them tells you whether the person you hear is who they claim to be – especially now that voices can be cloned.
What actually protects you
- Treat the number as a claim, not a proof.
- Call back on a number you already know before acting on any request involving money, codes or data.
- Use verified identities for the people and companies you trust, so a missing verification becomes a visible warning.
Identity Phone is being built to verify the person, not the number – read how deepfake voice calls work or join the early-access waitlist.
Frequently asked questions
Is caller ID spoofing illegal?
Spoofing with intent to defraud or cause harm is illegal in many countries, for example under the US Truth in Caller ID Act. But scammers usually operate across borders, so the law alone does not stop the calls.
Can I tell if a number is spoofed?
Not from the number itself. Calling back on a number you already know is the most reliable check.