Phone number spoofing: what to do if scammers use yours
The messages start the same way. A friend texts that you called them twice last night. A stranger leaves a voicemail asking why you keep phoning. Maybe a number you do not recognize calls back, angry, insisting your number rang them at 3 a.m. You know you did not make those calls, and now you are wondering whether your phone has been hacked. In most cases it has not. What you are likely seeing is called spoofing, and it is more common, and less personal, than it feels.
Take a breath. Nothing here means someone is inside your phone, and there are a few calm steps that will tell you where you stand.
What spoofing actually is
Caller ID is not verified the way most people assume. Scammers use software to make an outgoing call or text display any number they choose, and they often pick numbers that look local, or simply borrow a real one at random. Your number was probably chosen the same way a name is drawn from a hat. The people on the receiving end see your number, and when they call back, the call comes to you, not to the scammer. That is why it feels like you are being targeted when, in most cases, you are just a number that got used.
Check that your own account is fine
It is still worth ruling out the less common possibilities. Look at your phone’s recent call and message history to confirm there are no outgoing calls you do not remember. Check your carrier account for anything unfamiliar, such as a changed password, a new authorized user, or call forwarding you did not set up. If your phone suddenly lost service at some point, that is a different problem and worth reading about in what to do if your phone suddenly has no service, since a SIM swap means someone actually took control of your number. If your history is clean and your service is normal, spoofing is the most likely explanation.
What to do with the callbacks
You do not owe anyone a long explanation, but a short, steady one helps. You can tell people that your number is being faked by scammers, that you did not call them, and that they should not call back or click anything in a message that appeared to come from you. A brief voicemail greeting saying the same thing can save you a lot of repeat conversations. If a stranger is hostile, you can simply say your number was spoofed and end the call. Blocking repeat callers is fine, and so is letting unknown numbers go to voicemail for a while.
If the fake calls or texts seem aimed at people you know, or are pretending to be you personally, it is worth warning those people directly. Our post on someone impersonating you on social media covers how to do that without panic.
Report it
You can report spoofing to the FTC at ReportFraud.ftc.gov and to the FCC through its consumer complaint portal. Your reports will not make the calls stop overnight, because the scammer is not using your phone, but they do feed the data regulators and carriers use to trace and block spoofing campaigns. It is also worth telling your carrier, since many offer call-filtering tools and can note the issue on your account. If you are unsure whether a report goes anywhere, our post on what to do when you reported a scam and no one responded explains what to expect.
Should you change your number?
Usually not. The spoofing tends to fade on its own, often within days or weeks, as scammers move on to other numbers. Changing your number is a real cost, since banks, accounts, and contacts all depend on it, and a new number can be spoofed just as easily. It makes sense only if the volume of angry callbacks becomes unmanageable, and even then it is a last step, not a first one.
You did not do anything wrong, and nothing was taken from you. If something beyond the callbacks starts to feel off, such as account alerts or messages that seem to know too much about you, reach out and we can look at it together, privately.
— Gus