How scammers fake caller ID and text senders

Why a call can show your bank's number and still be a scam, and what to do.

⏱ 4 min read · ▶ 1:18 video
The short version

Spoofing means faking where a call or message comes from. Scammers can make your phone show a real company’s number, a local number, or even a name you trust. Caller ID tells you what the caller wants you to see, not who they are.

How it works

Phone systems were built long before scams were common, and internet calling makes it easy to type in any number to display. Text messages and emails can be faked the same way, and some scam texts simply use a name like “USPS” or “Bank Alert.”

Think of it like this: caller ID is like the return address on an envelope. Anyone can write any address there.

What about “verified” calls?

U.S. carriers use a system (called STIR/SHAKEN) to check whether calls really come from the number shown, and some phones show a “verified” check or a “spam likely” warning. These labels help, but they aren’t perfect, and an unverified call isn’t automatically a scam.

Common tricks

  • “This is your bank’s fraud department” with your bank’s real number showing.
  • A “family emergency” call, sometimes using a cloned voice.
  • Calls that seem to come from the police, IRS, Social Security or utilities, demanding payment now.
  • Texts about unpaid tolls or package problems with a link.

What it means for you

Use one simple rule: if a call or text asks for money, codes or personal details, hang up and contact the company yourself, using the number on your card, statement or the official website.

Quick tips

  • Never read a sign-in or verification code to a caller.
  • Agree on a family code word for emergency calls.
  • Real agencies don’t demand gift cards, wire transfers or crypto.
  • Block and report scam numbers so your phone learns.
  • If you shared details, call your bank right away and report it at ReportFraud.ftc.gov.

Test yourself: play Scam or Legit?, a quick free game.