People Say My Number Called Them — What to Do When Your Number Is Spoofed
Angry strangers calling you back, texts saying "who is this?", voicemails accusing you of robocalling — it means a spam campaign is displaying your number as its fake caller ID. You're not hacked, and it does burn out. Here's what's happening, what the Truth in Caller ID Act and STIR/SHAKEN do about it, and exactly what to do.
Published 2026-07-17 · Updated 2026-09-03 · By Andrew Pickett, OmegaIT
What's actually happening
Caller-ID spoofing means the calling system declares any number it likes as its origin — VoIP software makes this a one-line setting. Robocall campaigns use "neighbor spoofing": they display a number sharing the victim's area code and prefix so the call looks local. Your number isn't chosen because you were hacked; it's chosen because it's numerically adjacent to thousands of targets. Nothing on your phone or account is compromised — the campaign never touches your line, it just wears your number as a mask.
The scale is visible in the FTC's Do Not Call complaint files this site ingests: of the 289,434 complaints filed between July 27 and September 2, 2026 that recorded the complainant's area code, 40% named a calling number in that same area code, and only 0.25% of the geographic numbers complained about used a prefix that is not assigned to any carrier — the campaigns borrow real, in-service numbers like yours precisely so the caller ID looks plausible. Our neighbor-spoofing guide covers the receiving end of that; this one is for the person whose number was borrowed.
The complaint record is full of the collateral damage: complaints naming numbers that turn out to belong to bystanders. It's part of why every number page on this site carries the caveat that carrier assignment shows who a prefix belongs to — not who actually placed a spoofed call.
The law and the network fix
Spoofing is not illegal in itself — a business may lawfully display its main number from any employee's line — but the Truth in Caller ID Act of 2009, 47 U.S.C. § 227(e), makes it unlawful to transmit misleading or inaccurate caller-ID information "with the intent to defraud, cause harm, or wrongfully obtain anything of value". The FCC's implementing rules are at 47 CFR § 64.1604; the RAY BAUM'S Act of 2018 extended the prohibition to text messages and to calls originating outside the United States; and the TRACED Act of 2019 lengthened the limitations period and let the FCC fine spoofers without a prior warning. The FCC's spoofing consumer guide is the plain-English version. A campaign wearing your number to sell a fake debt program is squarely inside the prohibition — the problem is finding it, which is what complaints are for.
On the network side, STIR/SHAKEN caller-ID authentication — mandated for large voice providers' IP networks from June 30, 2021 under 47 CFR Part 64, Subpart HH — has the originating carrier sign each call with an attestation of how sure it is that the caller may use the displayed number. Calls spoofing your number from some other provider's customer cannot carry a full attestation, so terminating carriers score them as suspect and increasingly label or block them ("Scam Likely", "Spam Risk"). It has not ended spoofing — calls entering from overseas gateways and legacy non-IP segments are the gaps — but it is why a spoofing campaign burns through numbers faster than it used to. The FCC's call authentication page tracks the program.
What to do (and what not to)
Ride it out — campaigns rotate their fake caller IDs within days to a couple of weeks, so the callbacks stop on their own. Meanwhile: set a voicemail greeting saying your number is being spoofed and you're not the caller (it defuses angry callbacks), don't answer the return calls if the volume is unbearable (your carrier's tools can silence unknown callers temporarily), and don't engage with anyone demanding you 'stop calling them' — they're victims too; the greeting does the explaining.
Report it: file with the FCC at consumercomplaints.fcc.gov noting your number is being spoofed — spoofing with intent to defraud is illegal under the Truth in Caller ID Act, and reports help map campaigns. If your number's page on this site has collected mistaken complaints, use the dispute process — carrier-verified owner disputes get reviewed within two business days.
What doesn't help: changing your number (disruptive, and the new one can be spoofed tomorrow), paying a service to 'remove' the spoofing (impossible — nothing is attached to your line), or calling everyone back to apologize (the greeting scales; you don't).
If the spoofed calls target you instead
The mirror case: calls TO you showing familiar or official numbers — your own number, your bank, the IRS or SSA. Same technology, same rule: an inbound caller ID is decoration, not identity. Verify by hanging up and dialing the organization's published number yourself. A call from your own number is a 100% reliable scam tell — real networks never do that.
Sources
Got a call from an unknown number?
Look it up free — carrier, location, FCC complaints and first-hand reports.
Related
FAQs
Was my phone hacked if my number is spoofed?
No. Spoofing happens entirely on the caller's equipment — they type your number into their caller-ID field. Your phone, SIM and accounts are untouched. No password change or factory reset will affect it, because nothing of yours is involved.
How long does number spoofing last?
Usually days, occasionally two or three weeks. Campaigns rotate displayed numbers constantly to stay ahead of carrier blocking, so your number cycles out on its own. If callbacks persist beyond a month, mention it in an FCC complaint — persistent single-number spoofing is unusual and worth flagging.
Can I stop my number being spoofed in the future?
Not directly — any number can be typed into a caller-ID field. Industry-side, STIR/SHAKEN authentication increasingly marks unauthenticated calls as suspect, which is gradually making spoofed calls less deliverable. Individually, the voicemail greeting plus an FCC report is the complete practical toolkit.