Caller-ID Spoofing

Caller-ID spoofing allows fraudsters to replace their real number with any number they choose — including your bank's genuine helpline, a government department, or even a family member's mobile. The technique exploits the fact that the traditional telephone system was not designed with strong caller authentication, and freely available VoIP services let anyone set an arbitrary 'from' number at near-zero cost.

Scammers use spoofed caller IDs to add credibility to vishing calls. A victim who sees their bank's real number appear on screen is far more likely to trust the caller and follow instructions to transfer funds, read out one-time passcodes, or grant remote computer access.

Technological mitigations such as STIR/SHAKEN call-authentication standards are being rolled out in some countries, but coverage is uneven. The safest defence is to hang up and call back using the number on your card or the organisation's official website — never the number you were just called from.