Caller ID can be spoofed
A displayed number can be copied or manipulated. It may look local or match a real organisation without the call coming from that number.
Technology, platforms and channels
Scam calls, texts and messaging threats
Scam calls and messages use familiar channels to create urgency, authority or curiosity. The number, sender name or account shown on screen can be misleading, so the safest response is to verify the person and request through a route you control.
Page T-011Guidance pageReviewed 29 August 2026
Key Guidance
Do not rely on caller ID, a sender name or an accurate personal detail as proof. Stop the contact, avoid the supplied link or number, and independently reach the organisation or person if the request might be genuine.
Start with Key Guidance for the short answer. Then read the sections that match what happened and what you need to do.
Understand the issue
Why this matters to you
Calls and messages feel immediate and personal. That makes them effective Doors into many different scams, from parcel and tax messages to bank impersonation, investment pitches and family emergencies.
Sender names can be misleading
A false text may appear in an existing message thread, and a messaging account can be copied or compromised.
Real details do not prove identity
A caller may know your name, address, provider or recent activity from public, shared or exposed information.
The channel creates pressure
A ringing phone, repeated message or urgent instruction can narrow attention before you have checked the situation.
Consequences and movement
What may happen next
The contact may be the whole attempt or only the first step. What matters is where it tries to move you and what it asks you to surrender.
A call becomes a transfer
The caller may direct you to a supposed safe account, cash withdrawal, gift cards, cryptocurrency or a payment to fix a fabricated problem.
A message becomes a false website
A link may imitate a delivery, bank, tax, account or subscription page to collect sign-in details, card details or identity information.
A conversation moves platform
The sender may shift you to private messaging where the account, evidence and payment route are easier to control.
A missed call creates a return call
Some attempts depend on curiosity or concern leading you to call an unknown or potentially costly number back.
Practical response
What you should do
Use the same calm response whether the contact is obviously false or merely uncertain. You do not need to prove it is a scam before protecting the route.
- Stop and do not engageHang up. Do not reply, press requested buttons, click the link, install anything or share codes, passwords or financial details.
- Verify independentlyOpen the official app or website yourself, use a number on a card or statement, or contact the person through a saved route.
- Do not call an unknown number backIf the call matters, identify the organisation independently and use its published contact route.
- Report the contactForward suspicious SMS messages to 7726 where supported. Use the in-app reporting control for messaging services and report impersonating accounts.
- Act quickly after disclosureIf you shared money, account details or security information, contact the bank or provider at once using a trusted route.
- Preserve useful evidenceKeep the message, number displayed, username, timestamps, link and payment instructions. Evidence is useful even when the displayed identity was spoofed.
Look more closely
The safest clue is often where the contact wants to lead you
Caller ID, message history and familiar language can all be imitated or misused. Pay close attention to the link, number, account, download or action the contact wants you to use, then verify it through a route you choose.
The ring, missed call, text, direct message or group invitation reaches you.
Fear, curiosity, urgency, affection, authority or opportunity makes a response feel necessary.
A familiar number, sender name, logo, person or accurate detail creates apparent legitimacy.
The contact supplies the link, callback number, app, account or instructions that keep it in control.
The target may be payment, sign-in details, identity evidence, access codes or device control.
Selected history
Historical cases and lasting lessons
Caller-ID spoofing
Scammers have repeatedly presented numbers belonging to banks, public bodies, businesses or local areas so that an unexpected call appears familiar.
Lasting lesson: The displayed number is context, not reliable proof of who is calling.
Smishing and messaging impersonation
Short messages commonly imitate a routine delivery, bill, refund, security alert or relationship before directing the recipient to a controlled link or conversation.
Lasting lesson: A plausible subject does not validate the supplied route. Open the genuine service independently.
Transferable understanding
Patterns over time
The story changes; the movement repeats
Bank, parcel, tax, police, family and employer stories can all lead to the same controlled link, transfer or disclosure.
Silence can be a useful response
You are not obliged to help an unexpected caller verify themselves or explain why you are ending contact.
Search reports are clues, not proof
Other people’s reports may add context, but spoofing and number reassignment mean a number alone cannot identify the caller.
Contact can continue after refusal
A second caller may claim to investigate the first attempt. Repeated contact does not make the story independent.
Plain-language answers
Common questions
Can I trust a call because the number matches the organisation?
No. Caller ID can be spoofed. End the call and contact the organisation through a number or app you obtained independently.
Should I reply STOP to a suspicious text?
Do not reply to an unconfirmed message. A reply can confirm that the number is active. Use your device or network reporting route instead.
What if the caller knows personal information?
Accurate information may come from public records, prior contact or exposed data. It does not prove the caller’s identity or authority.
I answered but shared nothing. What should I do?
End the call, block or report it if appropriate and remain alert for follow-up contact. Answering alone does not mean your device or account was entered.
Reporting and immediate help
Use the bank or provider at once for money, account access or disclosed security information. Report the contact through the network or platform, and use the national fraud-reporting route when an attempt or loss needs recording.
Scamology Insights
Recognise the route behind the contact
These apps, tools, books and courses can help you separate the name or number shown from what the caller or message wants you to do. They can also help you find the point where leaving the contact restores your control. Links are intentionally withheld in this production version.
Continue understanding
Explore related guidance
Evidence and currency