Robocalls and Caller ID Spoofing: How to Stop Scam Calls for Good

Your phone rings. The caller ID shows a number from your own area code, maybe even one digit off from your own. You answer, and a calm recorded voice tells you your Social Security number has been suspended, or that your bank has flagged a suspicious charge, or that you have won a prize you never entered for. That call was almost certainly a scam, and the number on your screen was almost certainly fake.

Americans received roughly 50 billion robocalls in a single year, and phone-based fraud costs consumers billions annually. The technology that makes it possible costs criminals almost nothing. Here is how caller ID spoofing actually works, why the usual advice fails, and the settings that genuinely cut the volume down.

Why Caller ID Cannot Be Trusted

Caller ID was designed in an era when only telephone companies could place calls onto the network. The number displayed on your screen is simply a piece of data that the calling party supplies. Nothing in the original system verified it.

Today anyone with a Voice over IP account can set that field to any number they like. Legitimate businesses use this feature for good reasons: a hospital with fifty outbound lines wants every call to display the main switchboard number. Scammers use the exact same feature to display your bank's real customer service number while calling from an overseas call centre.

Neighbour Spoofing

The most effective trick is neighbour spoofing, where the fake number shares your area code and the first three digits of your own number. Answer rates for these calls are several times higher than for unknown out-of-state numbers, because the call looks like it could be your child's school or a local pharmacy.

The Four Scripts That Do the Most Damage

• The bank fraud alert. A caller claiming to be your bank's fraud department says an unauthorised transfer is in progress and asks you to "verify" it. The verification involves reading back a one-time code that actually authorises the criminal's transfer. Real banks never ask you to read a code aloud.
• The government impersonator. Social Security, the IRS, HMRC, or immigration authorities threatening arrest unless you pay immediately. Government agencies contact you by post first, never demand payment in gift cards or crypto, and never threaten arrest over the phone.
• The tech support call. Someone claiming your computer is sending error reports to Microsoft or Apple. Neither company monitors your machine or calls you.
• The utility shutoff. Your electricity or water will be cut off within the hour unless you pay by prepaid card. Utilities send written notices and never accept prepaid cards for urgent payments.

Warning Signs During the Call

• A pause of one or two seconds after you say hello. That is a predictive dialer connecting you to an available agent.
• Pressure to act within minutes, combined with instructions not to hang up or tell anyone.
• Any request for payment in gift cards, wire transfer, cryptocurrency, or payment apps.
• A request to install remote access software such as AnyDesk or TeamViewer.
• The caller already knows your name and address and uses that to build trust. Both are widely available from data brokers and breach dumps.

How to Actually Reduce the Calls

1. Stop Answering Unknown Numbers

This is the single most effective step. Answering, even briefly, confirms to the dialing system that your number reaches a live human, and your number becomes more valuable on lists sold between scam operations. Never press a key to "be removed from the list" — that confirms the same thing.

2. Turn On Carrier-Level Blocking

Every major carrier now offers free network filtering that stops known scam numbers before your phone ever rings. The apps are free and take two minutes to set up:

• AT&T: ActiveArmor Mobile Security
• Verizon: Call Filter
• T-Mobile: Scam Shield
• UK networks: most offer free scam call blocking in the network settings of their account app

Enable the highest blocking level, not just the "warn me" level.

3. Use Your Phone's Built-In Filter

On iPhone, go to Settings, Apps, Phone, and turn on Silence Unknown Callers. Anyone not in your contacts, recent outgoing calls, or Siri suggestions goes straight to voicemail. On Android, open the Phone app, tap the menu, Settings, Spam and Call Screen, and enable See caller and spam ID plus Filter spam calls. Pixel devices add Call Screen, which answers on your behalf and shows a live transcript.

The trade-off is that a legitimate call from a new doctor's office also goes to voicemail. In practice, real callers leave a message and scammers rarely do.

4. Understand What STIR/SHAKEN Does and Does Not Do

STIR/SHAKEN is the industry standard that cryptographically signs calls to prove the calling number is legitimate. When you see a green checkmark or "Verified" label, that is STIR/SHAKEN attestation. It has meaningfully reduced spoofing on major carriers, but it does not cover every small provider or overseas gateway, so an unverified call is not automatically a scam and a verified call is not automatically safe.

5. Register on the Do Not Call List, With Realistic Expectations

Registering at donotcall.gov (US) or tpsonline.org.uk (UK) stops legitimate telemarketers. Criminals ignore it entirely. It is worth doing, but it will not stop the calls that matter.

6. Report the Calls

Reports feed the databases that carrier filters use. In the US, report to the FTC at reportfraud.ftc.gov. In the UK, forward scam texts to 7726 and report calls to Action Fraud. It takes a minute and improves blocking for everyone.

If It Already Happened

1. If you gave a one-time code: call your bank on the number printed on your card immediately and tell them the code was compromised. Ask them to freeze outgoing transfers and reissue your card.
2. If you paid by gift card: contact the card issuer right away with the card number and receipt. Funds are occasionally recoverable if the card has not been drained.
3. If you paid by bank transfer: call your bank within hours and request a recall. In the UK, ask about reimbursement under the APP fraud rules.
4. If you installed remote access software: disconnect from the internet, uninstall the tool, change passwords from a different device, and run a full antivirus scan.
5. If you shared personal details: place a credit freeze and monitor your accounts for new applications.

The Bottom Line

You cannot stop criminals from spoofing numbers, because the flaw is baked into how the telephone network was built. What you can control is whether the call reaches you and what happens if you pick up. Turn on carrier blocking, turn on your phone's silence-unknown-callers filter, and adopt one unbreakable rule: no number on your screen is proof of who is calling. If a call claims to be your bank, hang up and dial the number on the back of your card. That single habit defeats every script in this article.