Most of us treat the number on our screen as the truth. If it shows your bank's name, it's your bank; if it's a local landline, it's someone nearby. Scammers know this, and they exploit it ruthlessly through caller ID spoofing - faking the number and name you see. Understanding how spoofing works is one of the most powerful defences you can have, because it breaks the single assumption most phone scams rely on.

What caller ID spoofing is

Caller ID is the name or number that appears when your phone rings. It was designed in a more trusting era, and the information can be set by the caller's system rather than verified by the network. Spoofing is the act of deliberately faking it - making the call appear to come from a different number or organisation than it really does.

This is why a scam call can show "HSBC", "HMRC" or a genuine-looking 0800 or local number. The display has been forged. Number spoofing (faking the number) and name spoofing (faking the displayed name) are two sides of the same trick.

The types you'll encounter

  • Organisation spoofing. The call shows the real name or number of a bank, government department or well-known company - lending instant false credibility to a bank fraud call or HMRC scam.
  • Neighbour spoofing. The number is faked to share your own area code and even your first few digits, so it looks like a local caller you might know. People answer local numbers far more readily.
  • Your own number. Occasionally a spoofed call appears to come from your number, which is purely a tactic to make you curious enough to answer.

A realistic example:

Your phone rings and the screen shows the exact customer-service number printed on the back of your debit card. The "advisor" says there's fraud on your account and they need to move your money to a "safe account". Everything looks right - but the number was spoofed, and the safe account is the scammer's. A real bank will never ask you to move money like this.

Why you can't rely on the number

Here's the uncomfortable truth: because the displayed number can be forged, a familiar number is not evidence that the caller is genuine. This is the assumption every "your bank is calling" scam depends on. Regulators like Ofcom are working with networks to reduce spoofing - for instance, by blocking calls that present clearly invalid or non-UK numbers as UK ones - but no system catches everything, so your own caution remains essential.

How to protect yourself from spoofing

The defence is a simple, unbreakable habit:

  1. Treat the number as unverified. No matter how official it looks, assume it could be faked.
  2. Never act on an inbound call. Don't share PINs, passwords or one-time codes, and never move money because a caller told you to.
  3. Hang up and call back on a trusted number - from the company's website, your statement, or the back of your card. For banks, dial 159 to reach your bank's fraud team safely.
  4. Use a second channel to verify. Log into your banking app, or check your account online, rather than trusting the call.
  5. Report spoofed calls to Action Fraud and forward details to 7726.

If you've received a spoofed call appearing to come from your own business number, customers may be receiving scam calls in your name; our Cloud Telephony service can help you present consistent, verified caller ID and advise on protecting your number's reputation.

The bottom line

Caller ID spoofing turns your phone's display from a fact into a suggestion. Once you accept that the number can lie, the scams that depend on it lose their power. Build one habit above all others: never act on an inbound call, and always verify by calling back on a number you trust. That single rule defeats the vast majority of phone scams.

Frequently asked questions

Can scammers really fake a phone number?

Yes. Caller ID spoofing lets a caller set the number and name your phone displays, so a scam call can appear to come from your bank, a government department or a local number. The display isn't verified by the network, which is why it can be forged.

Why did I get a call from my own number?

That's a spoofing tactic - the scammer fakes your number as the caller ID purely to make you curious enough to answer. You haven't been hacked by it; just don't engage, and block the call.

What is neighbour spoofing?

It's when a scammer fakes a number that shares your area code and sometimes your first few digits, so the call looks local and familiar. People are more likely to answer a local-looking number, which is exactly why it's used.

How do I know if a number is spoofed?

You often can't tell from the display alone - that's the problem. The safe approach is to treat any inbound call's number as unverified: never share security details, and call the organisation back on a trusted number (159 for banks) to confirm whether the contact was genuine.