Is this phone number fake? - Phone spoofing scams
Cybercriminals using a fake phone number (also known as phone spoofing), is one of the easiest ways an unknown person can steal your online identity.
Criminals using this technique will often disguise themselves as reputable companies in a specific location by disguising the caller ID so that their victims are more inclined to believe they are genuine.
A cybercriminal might pretend to be a…
Bank official
Police officer
HR department staff member
Loan Company
Debt collection company
There are many other companies a criminal will attempt to impersonate. However, it typically tends to be from someone higher up to intimidate their victims.
Phone spoofing is another form of social engineering. Just like phishing and spear phishing, cybercriminals who use fake numbers rely on human psychology.
They will deliberately use a fake phone number or modify the caller ID to hide their true identity. They might mimic the number of a trusted company or random member of the public. The criminal’s overall goals are to take sensitive and personal information from innocent people for financial gain.
Phone spoofing can have many negative consequences for the victim of a scam call. On top of this, it can also cause issues if cybercriminals are mimicking genuine numbers. This is because victims might believe that the person or company (to who the number has been traced back to), have taken their money.
Mimicking genuine phone numbers is a common tactic for someone using this type of fraud. The reason they do this is that someone is more likely to fall for their call.
What are the signs someone is calling me using a fake number?
Unfortunately, when it comes to spotting the signs of phone spoofing you mostly have to rely on your gut feeling. If you sense something doesn't seem right, you need to hang up, report the phone number, and block them. It's important to do this because…
Blocking the fake phone number will prevent cyber criminals from continuing to harass you. If you have received a fake call, we also advise you're careful when answering any future texts or calls, as it could be the same cybercriminals using a different number.
Reporting the fake phone number could help to prevent vulnerable people from falling for these scams. Did you know that the elderly are at an increased risk of falling for these types of attacks?
However, there are a few tell-tail clues that the call is a scam and criminals are after your details. One of these signs includes someone asking for personal details such as:
Bank details
Passwords
Home addresses
No reputable company will ask you to give your bank details or passwords. This is because it's your private information. It's information that no one else should know about you.
Criminals will often present themselves as well-mannered and friendly people. This is because they have received training in how to impersonate an honest caller. A typical scammer will state your full name and full address. This might leave you wondering how they could know that if they weren't genuine. However, it's easy to find out this information about someone, and they will have done extensive research before phoning you.
They will also use urgent language and have a sense of panic. For example, if they are pretending to be a bank officer, they might tell you that they've noticed a large amount of money being withdrawn from your account. They will ask you to confirm if you've withdrawn this amount (knowing you haven't, as no money has been taken). This will give you a sense of distress. The criminals will appear extremely helpful and might guide you through a set of instructions such as asking you to confirm your bank details or calling another number (which will direct you to an accomplice). They might talk quickly or use lines such as 'if you don't do this, you risk more money being taken.'
Usually, when someone tries to dispute this or seems unsure, they will up the scare tactics to guide their victims into falling for their scam.
So, if someone is calling you and asking for personal details, this is a big clue that you are speaking to a criminal and are at risk of fraud. Especially if you weren't expecting the call in the first place.
Remember, no reputable company should ever ask for personal details such as bank details or passwords. On top of this, they should never pressure anyone into handing this information over or tell you there will be severe consequences if you don't.
How do I protect myself against phone spoofing?
There are a few simple steps you can take to avoid phone spoofing and becoming the victim of fraud. This includes:
Avoid entering online competitions. Cybercriminals can set up fake competitions to lure people into handing over details such as their phone number, name, and address. Criminals can use this information to phone you and confirm important details about you or they can use it to commit fraud.
If someone calls you from an unknown number, you should be cautious. We appreciate that it's impossible to ignore these types of calls as the likes of the NHS use unknown numbers to make calls to patients. The NHS doesn’t have the facilities to take inbound calls which is one of the reasons they do this. So, rather than ignoring it, just be careful when you do answer.
Manually block any numbers that you suspect to be suspicious.
Never give any personal information to anyone over the phone. No reputable company should ever ask for this information, let alone make you feel pressured.
If you receive a call from a company such as your bank and you're unsure if it's genuine, hang up. Then dial the number you are familiar with such as the one on your bank statement or the number you typically call when talking to your bank. (Always wait 5 minutes after hanging up from the suspicious caller as this will ensure the line is clear and that you aren't speaking to the criminal or an accomplice).
What should I do if I’m the victim of phone spoofing?
If you believe you have been the victim of phone spoofing and are receiving calls from a fake phone number, you should:
Phone your bank - If you believe your bank cards, online banking, or cheques have been compromised, you must call your bank first. Your bank should be able to put a block on your account to prevent any more money from being taken. They can then inform you of the next steps as well as whether you can claim back the stolen money.
Inform Action Fraud - You must report any cybercrime or potential fraud. You can do this by visiting Action Fraud’s website or calling them on 0300 123 2040.
Tell your family, friends, and colleagues - By spreading the word, you can help save others the hassle of falling for these crimes. The more that people know, the fewer chances criminals have of obtaining personal details.