The number on your caller ID screen is not verified. It is a label a caller can set to display whatever they want, including your own bank's phone number, your local police precinct, a number from your own area code, or a number that looks like it belongs to someone you know.
This is called caller ID spoofing, and it is not a secret. Scammers use it routinely, specifically because most people still treat the number on their screen as a reliable indication of who is calling. Understanding what spoofing is and what it is not will change how you interpret every incoming call.
How Caller ID Spoofing Actually Works
The telephone system was designed decades ago without caller authentication in mind. When a call is placed over the public phone network, the caller's identity information, the number that shows on your screen, is transmitted separately from the call itself. Legitimate carriers usually pass through the actual originating number, but that is not a technical requirement baked into the system. It is a policy choice.
Voice over IP calling, which most phone calls now use at some point in their journey, makes it easy to set the caller ID field to any value before the call is placed. Commercial services designed for legitimate uses, like a business calling from a main company number rather than an individual employee's extension, use this capability all the time. Scammers discovered long ago that the same mechanism lets them display any number they choose.
The result is that by the time a call reaches your phone, you genuinely cannot know where it originated based on the caller ID alone.
The Neighborhood Spoofing Technique
One specific tactic worth naming is neighborhood spoofing, where a scammer deliberately displays a number with the same three-digit prefix as your own number. The idea is that you will be more likely to answer a call that looks local. If your number is 720-338-xxxx, a scammer might dial in from a number that shows as 720-338-9xxx, looking almost like it could be a neighbor, a school, or a local business.
People are more likely to answer calls that look local for obvious reasons: local calls feel more relevant and less likely to be spam. Scammers track answer rates and optimize their spoofed numbers accordingly. When local-looking numbers stopped working as well because people got wise to them, they shifted to spoofing numbers belonging to government agencies and financial institutions, which get answered for different reasons entirely.
What Spoofing Enables in Practice
Caller ID spoofing is not just a technical trick. It is the foundation of several entire categories of phone fraud:
- Government impersonation: Scammers display an IRS phone number or a Social Security Administration number so the recipient thinks the call is official.
- Bank fraud: The displayed number matches the customer service line on the back of your debit card. You assume it is your bank and follow instructions you otherwise would not.
- Utility shutoff: A number that appears to be your electric or gas company is used to demand immediate payment under threat of service cutoff.
- Family emergency: The displayed number looks like it belongs to a family member or a hospital in their city.
In each of these cases, the spoofed number is the first step in building false trust. The scammer uses the displayed number to establish legitimacy before making their request.
STIR/SHAKEN: What the Carriers Are Doing and Why It Is Not Enough
US phone carriers have implemented a system called STIR/SHAKEN designed to authenticate calls and let carriers attest to whether a calling number has been verified. When it works, you may see labels like "Caller Verified" in some phone interfaces. The system has reduced some categories of spoofing on calls that travel entirely within authenticated carrier networks.
However, STIR/SHAKEN does not cover every call. International calls, calls originating through certain VoIP providers, and calls that pass through older network segments may not carry attestation data. Scammers operating overseas or through networks that do not participate in the system can still reach US phones with spoofed numbers. The system is better than nothing, but it is not a complete solution, and it does not protect everyone equally.
The practical takeaway: A caller ID label can look exactly like your bank or a government agency and still be a scammer. The number on your screen is a starting point for consideration, not a verification.
How to Handle Incoming Calls Given This Reality
The most important behavioral change is separating "who the caller says they are" from "who the caller actually is." The number on your screen is unverified. What the person on the line asks for is the real signal.
If someone calls claiming to be from your bank, hang up and call the number on the back of your card. If they claim to be from a government agency, hang up and look up the agency's number independently. If they say they are calling from a company you do business with, hang up and use the contact information from a recent statement or the company's official website.
This is not paranoia. It is the equivalent of how you would verify a plumber's credentials before letting them into your house. The person showed up at your door does not mean they are who they say they are.
Savi Security's detection layer approaches this by looking beyond the caller ID entirely. Our app analyzes what is happening on the call itself: the speech patterns, the behavioral tells in how the caller escalates, the content patterns in text messages. A scammer can spoof a number, but they cannot spoof the structure of a fraud script. That is where the real signals live.
Understanding spoofing takes away the psychological advantage scammers get from a familiar-looking number. Once you know the display is unreliable, it stops being the deciding factor in whether you comply with a request. That shift in thinking is worth more than any single piece of software.
