Number Spoofing Scam UK: Spot a Fake Caller ID
Scammers can make any number appear on your phone. Here's how to recognise when you're being spoofed — and what to do about it.
What number spoofing is
Number spoofing is when a caller deliberately makes your phone display a different number, so a scam call appears to come from your bank, HMRC, the police, or another trusted organisation. An example of the effect: your screen shows your bank's genuine customer service number, but the person calling is a fraudster.
Caller ID can be changed or spoofed, and a matching number proves nothing about who is really calling. This guide explains how it works, how to stay safe, and what to do if you have already been caught out.
Why spoofed calls are so convincing
Seeing a familiar, correct-looking number removes the natural suspicion you would have towards an unknown caller, so you are more likely to trust what they say and act quickly. Scammers combine spoofing with other techniques — knowing some of your details, sounding professional, and creating urgency — to build a convincing picture.
The fact that protects you: caller ID, on its own, is never proof of who is calling. Genuine callers understand this and will not object if you hang up and call back yourself.
Signs a call may be spoofed
- The caller claims to be your bank, HMRC, the police, or another official body and creates urgency.
- You are asked to move money, share a one-time code, PIN, or password, or grant remote computer access.
- The caller discourages you from hanging up or checking independently.
- You are told to keep the call secret from bank staff, family, or friends.
- The number matches an organisation's real one, but the request itself feels unusual.
- You did not expect the call and cannot verify why they would be contacting you.
How spoofing is used in scams
First, a scammer changes the caller ID your phone displays to a trusted-looking number. Second, they call and use the trusted-looking number to lower your guard. Third, they combine this with urgency, fear, or a plausible story to get you to move money, share codes, or grant access to your device. Fourth, once the scam is complete, contact stops.
Hanging up and calling the organisation back on a number you find yourself, not the number that called you, breaks the chain.
How to protect yourself from spoofed calls
Treat the number on your screen as unreliable evidence on its own.
- If a call asks you to move money, share a code, or grant remote access, hang up regardless of what number it showed.
- Call the organisation back using a number from their official website, a genuine letter, or the back of your card — never a number given during the call.
- Wait at least five minutes before calling back, or use a different phone, so you are not accidentally reconnected to the scammer.
- Remember that banks and government bodies will not ask you to move money to a "safe account" or share a one-time code.
Our impersonation scams when criminals pretend to be your bank or the police and Police Impersonation Scam UK: Spot a Fake Officer Call guides cover the scams that most often use spoofing in detail.
If you have already responded to a spoofed call
Act immediately. Contact your bank on 159 or a number you find yourself, tell them it was a scam, and ask them to try to recover any payment and stop further transfers. If you sent money by UK bank transfer on or after 7 October 2024, mandatory APP fraud reimbursement rules may apply to Faster Payments and CHAPS transfers. The PSR rules include a 13-month claim window, a maximum claim amount of £85,000, possible exclusions, and a possible excess of up to £100. Report it to your bank as soon as possible.
If you shared a one-time code, password, or granted remote access, ask your bank to secure your account and change your passwords from a different, trusted device. If you shared identity details, consider Cifas Protective Registration at cifas.org.uk and monitor your credit reports with Experian, Equifax, and TransUnion. Keep the caller's number, times, and what was said as evidence.
How to report a spoofed number scam (UK)
Tell your bank or the organisation involved directly through official channels, as they can investigate and secure your account. If the same scam reached you as a text message, forward that text to 7726 so your mobile provider can investigate. A scam email can be sent to the NCSC at report@phishing.gov.uk.
If you lost money or shared sensitive information, report it to Report Fraud at reportfraud.police.uk or on 0300 123 2040 if you are in England, Wales, or Northern Ireland. In Scotland, report to Police Scotland on 101. Keep all your evidence.
Frequently asked questions
If the number matches my bank's real number, doesn't that prove the call is genuine?
No. Number spoofing lets criminals make almost any number appear on your screen, including your bank's genuine one. Never rely on the displayed number alone — hang up and call back using a number you find yourself.
How do scammers spoof a phone number?
They use calling systems that can change the caller ID your phone displays, without needing to actually control that number. It requires no special access to the real organisation's systems.
A spoofed caller told me to move money to a safe account — should I?
No. Treat any such request as a scam, however convincing the caller or the number shown. Hang up and call your bank yourself on 159 or the number on your card.
I responded to a spoofed call and shared details or moved money — what now?
Contact your bank immediately on 159 or a number you find yourself. Eligible UK transfers since 7 October 2024 may fall under APP reimbursement rules, subject to limits and exclusions.
How do I report a spoofed number scam?
Tell your bank or the impersonated organisation directly, then if you lost money or shared details, report it to Report Fraud in England, Wales, or Northern Ireland, or to Police Scotland on 101 in Scotland.