Can scammers fake a caller ID?
Yes. Caller ID can be set to display any number or name, so a familiar-looking number on your screen does not confirm who is calling.
Last reviewed: 1 June 2026
Explanation
Caller ID spoofing allows anyone with the right software to display any phone number they choose when making a call. This means a call can appear to come from your bank, the police, HMRC, the IRS, a hospital, or a family member's phone — while actually originating from a scammer anywhere in the world.
Spoohing is used to make impersonation scams more convincing. If you receive an unexpected call from a number you recognise but the caller makes unusual requests — moving money, sharing codes, installing software, or paying a fine — hang up and call back using a number you know is correct, such as the one printed on your bank card or from the official website. Never rely on a caller ID display alone as proof of identity.
Common red flags
- A trusted number calls and immediately asks for money, codes, or access
- Caller claims to be your bank, police, or a government body
- Urgency combined with a request to keep the call secret
- The request would be unusual even if the caller were genuine
- Caller discourages you from hanging up and calling back independently
What to do now
- Hang up and call the organisation back using a number from its official website or your card
- Never share one-time codes, passwords, or banking details over the phone
- Do not move money at a caller's instruction, regardless of what number they appear to call from
- Report suspicious calls to your national fraud service
- Let friends and family know that caller ID can be faked
Frequently asked questions
If I call back the number that called me, will I reach the real organisation?
Not necessarily — some spoofed setups route callbacks to the scammer too. Always use a number you find independently, such as the number on the back of your bank card or on the official website.
Is caller ID spoofing illegal?
Using spoofing to deceive or defraud is illegal in most countries. However, law enforcement alone cannot prevent it — protecting yourself means not relying on caller ID as verification.