Numbers can be spoofed
A caller can make a different number appear on the recipient's screen, including a familiar or UK-looking number.
Technology, platforms and channels
Can I trust the number shown on caller ID?
Caller ID can help describe how a call reached you, but it is not proof of who controlled the call. The displayed number may be spoofed, withheld, reassigned or genuinely associated with an organisation whose identity is being copied.
Page S-014Guidance pageReviewed 29 August 2026
Key Guidance
No—not by itself. Do not use the displayed number as identity proof and do not call it back when an important request is involved. End the call, wait if necessary, then reach the person or organisation through a number or account route you selected independently.
Start with Key Guidance for the short answer. Then read the sections that match what happened and what you need to do.
Understand the issue
Why this matters to you
The number is one technical signal in a telephone system. It should not be treated as a certificate of the caller's identity or intentions.
A genuine number can still mislead
The displayed number may belong to the organisation being impersonated without the call originating from that organisation.
Blocking reduces but does not remove risk
Network controls stop some invalid presentations, but official guidance still warns that deceptive calls can get through.
The request remains the decisive evidence
Pressure for passwords, codes, remote access, secrecy or payment is unsafe regardless of the number displayed.
Consequences and movement
What may happen next
Treat the number as context, then confirm the claim through a route that was not controlled by the incoming call.
The call claims to be from an organisation
End it and use the organisation's official website, app, card or statement to make contact independently.
The number belongs to someone I know
Contact that person through another familiar route if the request is unusual, urgent or involves money or information.
It was an unknown missed call
Do not call back only because it appeared. Unexpected return calls can lead to premium-rate or other unwanted charges.
I already acted during the call
Protect the money, account, information or device involved. The number lookup is less urgent than the effect.
Practical response
What you should do
Move from passive recognition of the displayed number to active verification of the claimed person, event and requested action.
- End the incoming callYou do not need to remain connected while checking. Do not accept a transfer to a supposed colleague or security department.
- Choose a separate routeUse a genuine app, account, official website, card or saved contact—not a number supplied or confirmed by the caller.
- Check whether the event existsInspect the relevant account, transaction, booking or family situation without repeating information the caller gave you as proof.
- Assess the requestPasswords, one-time codes, remote access, secrecy and movement of money require refusal and independent contact regardless of caller ID.
- Use blocking and filtering as supportEnable trusted device or provider controls, while remembering that filtering cannot authenticate every call.
- Report the contact appropriatelyPreserve the displayed number, time, claim and request, then use the telecoms, organisation or fraud-reporting route suited to what happened.
Look more closely
A displayed number describes the call, not the caller
Caller ID can be spoofed, withheld, reassigned or associated with an organisation whose identity is being copied. Verify the event and request through a separate number or service you trust.
The incoming call creates immediate contact.
A familiar or local-looking number lowers concern.
The displayed number supports a claimed identity.
The caller supplies instructions, a transfer or a callback route.
The recipient ends the call and chooses a separate route.
Selected history
Historical cases and lasting lessons
Number spoofing can imitate trusted organisations
The UK telecoms regulator warns that criminals can change caller ID so a call appears to come from a bank, government body, delivery company or other trusted organisation.
Lasting lesson: The name associated with a number does not confirm who placed the present call.
Some inbound-only numbers should never originate calls
The Do Not Originate system records selected numbers that organisations reserve for incoming calls so providers can block outgoing presentations of them.
Lasting lesson: Blocking controls improve the network, but public verification must still use an independent route.
Transferable understanding
Patterns over time
Familiarity becomes authority
Recognition of a number can cause the recipient to accept the caller's role before testing the request.
Local appearance reduces distance
A UK or nearby area code may make an unknown caller seem ordinary even when the presentation was changed.
The caller offers to prove the number
The recipient may be told to compare the display with a card or website, although spoofing is precisely what makes that comparison weak.
The consequence outranks the lookup
Once a code, payment, password or remote-access action has happened, immediate protection matters more than identifying the originating number.
Plain-language answers
Common questions
Does spoofing mean the genuine number was hacked?
No. A number can be displayed without access to the genuine holder's phone or systems.
Is a withheld number automatically suspicious?
No. Some genuine callers withhold numbers. Decide from the claim and request, then verify independently when it matters.
Can a number-reporting website prove who called?
No. Reports can provide context, but numbers may be spoofed, reassigned or used by several people. They cannot authenticate the present caller.
Should I call the displayed number back?
Not for a high-stakes claim. Use a contact route you selected from the genuine organisation, account or person.
Verify the caller through a route you control
End the call, independently reach the claimed person or organisation and act at once if information, account access, software or money was already involved.
Scamology Insights
Separate a familiar signal from verified identity
These learning resources can help you see why caller ID does not prove who is calling and why checking through a number you found yourself restores control. Links are intentionally withheld in this production version.
Continue understanding
Explore related guidance
Evidence and currency