If you are receiving calls from numbers that look like yours or share your area code and first few digits, the reason is neighbour spoofing. Scammers fake caller ID information to make their calls appear local, increasing the chance you will answer. The safest response is to not pick up. Answering confirms your number is active and often leads to more scam calls.
This tactic is common in both the United States and Canada. The FCC and the CRTC have both documented neighbour spoofing as a widespread problem, and both countries now require phone carriers to implement caller ID authentication technology called STIR/SHAKEN to help combat it.
Why am I getting calls from my own number or a similar number?
Neighbour spoofing works by altering the caller ID display so the incoming call appears to come from a number in your local area, sometimes even matching your area code and exchange (the first six digits of a 10-digit number). Scammers do this because people are more likely to answer a call that looks local or familiar.
The calls are often robocalls with prerecorded messages, but some involve live callers who attempt to extract personal information, sell fraudulent services, or trick you into paying fake debts. Once you answer, scammers know your number is active, which can result in an increase in future scam calls.
You may also receive calls that appear to come from your own exact number. This is sometimes called mirroring. It serves the same purpose: to get you to pick up out of curiosity or confusion.
Is it dangerous to answer spoofed calls?
Answering a spoofed call is not inherently dangerous, but it does carry risks. The act of answering confirms to the scammer that your number is active and monitored. This often leads to more calls from the same operation or from other scammers who purchase validated phone lists.
The real danger comes from engaging with the caller. If you provide personal information, financial details, or follow instructions to press buttons or call back, you risk:
- Identity theft if you share personal data such as your Social Insurance Number, Social Security Number, or banking details
- Financial fraud if you authorize payments or provide credit card numbers
- Further targeting if scammers determine you are willing to engage
The safest approach is to not answer calls from numbers you do not recognize. If the call is legitimate, the caller will leave a voicemail.
What should I do if I accidentally answered a spoofed call?
If you answered and realized it was a scam, hang up immediately. Do not press any buttons, even if the recording says to press a number to stop receiving calls. Do not provide any personal information, and do not confirm your name or identity.
After hanging up:
- Block the number on your phone.
- If you shared any financial information, contact your bank immediately.
- If you shared personal identification details, consider placing a fraud alert with a credit bureau (Equifax or TransUnion in Canada, or any of the three bureaus in the US).
- Report the call (see the reporting section below).
Can I block neighbour spoofing calls?
You can block specific numbers, but scammers rotate through spoofed numbers quickly, so blocking alone is not effective. More useful approaches include call filtering features built into your phone and carrier-level spam blocking.
In the United States and Canada, phone carriers are now required to implement STIR/SHAKEN, a caller ID authentication framework that verifies whether the caller ID information has been tampered with. When a call passes STIR/SHAKEN verification, it means the caller's identity has been authenticated. Calls that fail or lack verification are more likely to be spoofed. Some carriers and phone apps display a verified checkmark or label when a call passes authentication.
However, STIR/SHAKEN is not a complete solution. It only works on IP-based (VoIP) networks, and many calls still travel over older infrastructure where authentication is not possible. It reduces spoofing but does not eliminate it.
How do I stop these calls on iPhone?
Apple provides a built-in feature to screen unknown callers that sends calls from numbers not in your contacts, recent calls, or Siri suggestions directly to voicemail. To enable it:
- Open Settings.
- Tap Apps.
- Tap Phone.
- Tap Screen Unknown Callers.
- Choose Silence (or Ask Reason for Calling).
With this enabled, unknown numbers will not ring your phone. Callers will be sent to voicemail, and the call will appear in your recent calls list so you can call back if needed.
You can also check with your carrier about additional call filtering or spam blocking services. Many carriers in the US and Canada offer free apps or network-level filtering that identifies and blocks suspected spam before it reaches your phone.
How do I stop these calls on Android?
The Google Phone app includes caller ID and spam protection features. To enable them:
- Open the Phone app.
- Tap the three-dot menu in the top right.
- Tap Settings, then Caller ID and spam.
- Turn on See caller ID & spam.
- Optionally, turn on Filter spam calls to send suspected spam directly to voicemail.
On Pixel phones, Call Screen can automatically answer suspected spam calls with Google Assistant, which asks the caller to identify themselves before your phone rings. If the caller hangs up or gives a suspicious response, the call is filtered out.
Samsung, LG, and other manufacturers may have their own call filtering features in the default phone app. Check your phone's settings or your carrier's website for available options.
What should I do if my number is being spoofed and people are calling me back?
If strangers are calling you to complain about missed calls you never made, your number is likely being spoofed by a scammer. This is frustrating, but there is little you can do to stop it directly. The FCC advises that scammers typically rotate through numbers quickly, so the spoofing usually stops within hours.
In the meantime:
- Do not answer calls from unknown numbers, as they may be angry recipients calling back.
- Consider updating your voicemail greeting to explain that your number has been spoofed and that you did not make those calls.
- Report the situation to your carrier, who may be able to provide additional guidance.
Changing your phone number is rarely necessary and usually not recommended, since the spoofing is temporary.
How do I report spoofed calls?
Reporting helps regulators identify patterns and take enforcement action against large-scale operations. In Canada, you can:
- Register your number with the National Do Not Call List to reduce legitimate telemarketing calls (though scammers ignore this list, it establishes a baseline).
- Report fraud or suspected fraud to the Canadian Anti-Fraud Centre online at reportcyberandfraud.canada.ca or by phone at 1-888-495-8501.
- File a complaint about telemarketing violations with the CRTC through the National DNCL website.
In the United States:
- Register your number with the National Do Not Call Registry.
- File a complaint about spoofing with the FCC Consumer Complaint Center.
- Report phone scams to the FTC at reportfraud.ftc.gov.
Why should businesses care about caller ID spoofing?
Neighbour spoofing is not just a consumer nuisance. For businesses, it intersects with broader social engineering risks. Attackers use phone calls to impersonate banks, IT support, vendors, and even executives. This technique, called vishing (voice phishing), has become more sophisticated and is increasingly used in targeted attacks against businesses.
Common business risks include:
- MFA reset scams: Attackers call employees claiming to be IT support, asking them to approve MFA prompts or share one-time codes. If your team is not trained to verify callers, these attacks succeed. We covered how attackers are bypassing MFA in our article on phishing-resistant authentication.
- Vendor impersonation: Scammers spoof a known vendor's number and call accounts payable to request a change in banking details for upcoming payments.
- Executive impersonation: Attackers spoof an executive's number and call staff with urgent requests for wire transfers or sensitive information.
Training staff to verify callers before sharing any information is essential. If someone calls claiming to be from your bank, a vendor, or IT support, hang up and call back using a number you find independently on the organization's official website. This simple habit defeats most phone-based social engineering.
For more on building effective training programs, see our guide to security awareness training that works for small businesses. If mobile devices are a blind spot in your security posture, our article on mobile devices as a business security risk covers the broader landscape.
The bottom line
Calls from numbers that look like yours are almost certainly spoofed. Do not answer calls from numbers you do not recognize. If you do answer, do not provide any personal information and hang up if the call seems suspicious. Enable call filtering on your phone, and report scam calls to the appropriate authorities in your country.
For businesses, caller ID spoofing is part of a broader social engineering threat that targets employees through phone, email, and text. If you are unsure how your organization handles these risks, our free cybersecurity assessment covers phone and email security as part of a 22-area review that takes about five minutes.
This article is intended for general informational purposes only and does not constitute professional security, legal, or compliance advice. Details about caller ID spoofing, STIR/SHAKEN requirements, and phone settings are based on information from the FCC, CRTC, Apple, and Google as of October 2026 and may change with future updates. Organizations should consult qualified cybersecurity professionals before making operational changes based on this article.