Report a Scam Phone Number So It Gets Traced
Filing takes ten minutes. Understanding what happens to the filing takes a page like this one. Your report joins a pipeline that runs from a federal intake form, through a private consortium that walks a call backwards along the carriers that carried it, and out the other end as an order that can cut a whole provider off the network. What it almost never produces is an answer addressed to you. Here is the route, the rules that govern each hop, and the honest arithmetic of what an individual filing is worth.
The ninety-second version
File in three places the same day. The Federal Trade Commission takes the fraud narrative, the Federal Communications Commission takes the call itself, and your own carrier takes the number so its filters can learn from it. Then stop waiting for a reply. None of those three writes back to tell you what became of a scam caller, and only one of them ever writes back at all. The machinery your report feeds is aimed at carriers, not at callers. A pattern that survives the intake stage becomes a traceback, and a traceback that lands becomes an order telling other providers to stop accepting that provider’s traffic entirely. What you control is the quality of the record. A filing with the exact minute, the callback number and the words the caller used is worth more to that pipeline than ten filings that say a scammer called.
Watch: what a filing actually sets in motion
A short walk through the four intake points and the one process that can genuinely take a scam operation off the network.
Where the report goes next
Four destinations, and what each one does with it
They are not duplicates of each other. Each holds a different kind of authority, and only one of them can write you a letter.
The first destination is the Federal Trade Commission, which runs two front doors. One is for people who lost money or handed over data, and it wants the story: what the caller claimed to be, what was demanded, how the payment moved. The other is a shorter form for an unwanted call where nothing was lost. Neither is a case-opening mechanism. The Commission is explicit that it does not resolve individual reports and cannot act on behalf of one person; what it builds is a fraud record that its law-enforcement users query when they are deciding whether a pattern is worth a case.
The second is the Federal Communications Commission, and this is where most people misread the process. The Commission runs a consumer complaint center, and its rules do contain a real, individual-outcome procedure: under the informal complaint process the Commission forwards the complaint to the carrier for investigation, may set a due date for a written response, and requires that response to be copied to you. But read what that machinery is for. It is a complaint against a carrier — your own provider, over billing, service or a blocking error. A report about a stranger who called pretending to be your bank is not a complaint against your carrier, so it does not enter that loop. It is counted.
Counted is not nothing. The Commission’s report to Congress on robocalls submitted on 23 December 2025 sets out how many informal complaints alleged violations of each part of the statute. For 2024 it records 33,137 complaints touching the restrictions on automated and prerecorded calls, 73,028 touching the Do Not Call rules, 24,459 touching the technical and procedural standards, and 29,180 touching the prohibition on misleading caller identification — with the report’s own caveat that a single complaint alleging several things is counted under each. Those totals are the raw material the Enforcement Bureau uses to decide which traffic is worth chasing.
The third destination is your own carrier, and it is the one most people skip. For text messages there is a dedicated route: forwarding the message to the short code 7726, which spells SPAM on a keypad. The Commission described the mechanism in its 2023 order on text blocking, noting that wireless providers established 7726 for consumers to report unwanted messages and that providers use what consumers report through it to calibrate their spam filters and blocking tools. Carriers commenting in that proceeding described asking the customer to reply with the sender’s number after the forward, which is why that second automated text is not a bug — it is the part that makes the report usable. On the voice side there is no equivalent short code; you go through the carrier’s fraud or abuse channel, and if the calls are targeted at you personally rather than dialed at random, that is a different procedure entirely, covered on our page about identifying the person behind a scam call.
The fourth destination is the one you cannot file with at all: the industry traceback consortium. It is where a report has to arrive if the number is ever going to be walked backwards to its origin, and consumers are not on the list of parties who can start that process. The next two sections are about how a report gets there anyway, and what happens when it does.
What turns a filing into something usable
Six fields decide whether your report survives the first automated pass or dies as one more anonymous tally mark.
Start with the two numbers, and understand that they are not equally valuable. The number on your screen is the one everybody writes down, and it is the one most likely to be worthless, because it costs a fraud operation nothing to display a number it does not control. The number that received the call — your own line — matters more than people expect, because it is what lets an analyst confirm the call actually traversed a US network on the date claimed. And any callback number the caller gave you is the single most valuable field on the form, because unlike the display, a callback number has to genuinely work. Money and marks have to reach the operation somehow. That number points at live infrastructure.
Then the timestamp. Date, hour, minute and your time zone, taken from your call log rather than from memory. Traceback work is a matching exercise across carrier records, and an approximate time is not a match. If the call left a voicemail, keep the audio; if it left a text, keep the message rather than a retyped version of it, because the header data goes with the forward and not with the paraphrase.
Then the two content fields that reports routinely leave blank. What was said — specifically the opening claim, because impersonation campaigns run from scripts and the script is the fingerprint that groups thousands of calls into one campaign. And what was asked for, described by mechanism rather than by feeling: a gift-card code, a wire, a crypto ATM deposit, a one-time passcode read aloud, remote access to a computer. Enforcement bodies and banks sort by rail, and the rail is the thing that determines whether anything can still be clawed back.
One more field is worth knowing about because it converts a nuisance into a rule violation. Under the Telemarketing Sales Rule a telemarketer must transmit its telephone number, and its name where the carrier makes that available, to the caller-identification service in use by the person being called. The rule permits a substitution — the seller’s or charity’s name together with a customer or donor service number — but that substitute number has to be answered during regular business hours. So “the callback number they gave me rings nowhere” is not a dead end in your report. It is a fact worth writing down, because a substituted number that answers nobody is a defect in the caller’s own compliance story.
Everything above is also the file we build for a client, in the same order and for the same reason. If the number is attached to a loss you are trying to recover, the documentation habits carry over directly to the wider job of building a record on the person behind a fraud.
The traceback chain, link by link
The only process that reliably answers “where did that call originate” — and the reason you cannot start it yourself.
After the 2019 robocall statute, Congress told the Commission to register a single private-led body to run tracebacks rather than leave each investigation to be assembled by subpoena. The rule that implements it says the Enforcement Bureau “shall issue a public notice no later than April 28 annually seeking registration of a single consortium that conducts private-led efforts to trace back the origin of suspected unlawful robocalls” — that is the regulation’s own wording, quoted rather than paraphrased. An applicant has to show it is a neutral third party, file its written best practices, and certify that its work will focus on fraudulent, abusive or unlawful traffic. The incumbent does not have to reapply each year.
The Bureau selected the Industry Traceback Group, run by the trade association USTelecom, on 27 July 2020, and has reselected it since; in the most recent cycle no other entity filed a letter of intent at all. It is a working group of providers drawn from wireline, wireless, VoIP and cable, not a government office, which is exactly why its output has to be handed to an agency before it becomes enforcement.
Mechanically, a traceback runs backwards. The consortium notifies the terminating provider — the one whose customer took the call. That provider identifies the upstream provider it received the traffic from and enters it in a secure portal. The next provider does the same, and the next, until either the originating provider is identified or the chain hits a dead end, which is a real and common outcome. Since the start of 2024 each of those hops has run against a clock: a voice service provider that receives a traceback request from the Commission, from law enforcement or from the consortium must fully respond within 24 hours, with the clock pausing outside business hours and over weekends and federal holidays. Before that rule, every link in the chain could require its own subpoena.
Here is the part that decides what your filing is worth. Tracebacks are initiated by the consortium’s steering-committee members, by call-analytics firms whose scoring systems flag suspicious traffic (including services that let subscribers flag robocall voicemails, which are then passed on for investigation), by enforcement authorities at state and federal level, and by organizations whose brands are being impersonated in calling campaigns — that last route may carry a fee. A member of the public is not on that list. Your report reaches the traceback process indirectly or not at all: through the analytics layer if you used your carrier’s reporting tool, or through an agency that decided your pattern was worth referring.
The scale is public, because the Commission passes the consortium’s figures to Congress each year. Its report of 23 December 2025 records that in 2024 the consortium initiated 3,606 tracebacks of suspected unlawful robocalls, 131 fewer than were conducted in 2023, while the number of live calls it traced rose from 607 in 2023 to 1,408 in 2024. It identified 714 US-based and foreign providers in the course of that work, 275 of which it had not previously identified. And 69% of completed tracebacks resulted in the originating provider warning or terminating the caller — a decrease from 84% in 2023. That last figure is the closest thing to a success rate anyone publishes, and it measures a provider dropping a customer, not an arrest.
Five routes, five different outputs
Read the last column first. It is the one that sets expectations correctly.
| Where the report lands | What it actually produces | Does anyone write back? |
|---|---|---|
| People Locator Skip Tracing | A written, source-cited file on what the number and the callback number can lawfully be tied toDirect answer | Yes — the findings are reported to you |
| Federal Trade Commission | An entry in the federal fraud record that law-enforcement users query when sizing up a pattern | No individual resolution, by the agency’s own statement |
| FCC consumer complaint center | A counted complaint under the relevant part of the statute; input to Enforcement Bureau targeting | Only where the complaint is against your own carrier |
| Your carrier, or 7726 for texts | Data used to calibrate the network’s spam filters and blocking tools | An automated acknowledgement, sometimes a follow-up asking for the sender |
| Industry Traceback Group | Identification of the originating provider; 69% of completed tracebacks ended in a warning or cut-off in 2024 | You cannot file with it directly |
| A court, under the statute | The only route that produces a remedy addressed to you personally — and the only one that needs a defendant with assets inside the United States. See the next section. | |
The reason we sit in the top row is not that we outrank a federal agency. It is that the agencies are built to act on aggregates and we are built to answer one question for one client. Where that question is “who is on the other end of this, and what can I lawfully do about it”, the work belongs with a public-records research team rather than with an intake form, and the two are complements rather than substitutes.
What enforcement looks like when it finally lands
The sanction at the end of this pipeline is aimed at a carrier, not at the person who rang you. That single fact explains almost every disappointed expectation on this subject.
When the Enforcement Bureau decides a stream of traffic is illegal, it issues a Notification of Suspected Illegal Traffic. The rule requires that notice to identify the traffic with as much particularity as possible, give the basis for the Bureau’s belief that it is unlawful, and cite the provisions it appears to violate, and it must allow the provider a minimum of fourteen days. The provider then has a choice: investigate and certify that it is blocking the identified traffic and describe how it will keep blocking substantially similar traffic, or explain why it reasonably concluded the traffic was lawful.
If that response does not come, or is judged insufficient, the Bureau issues an Initial Determination Order and gives the provider at least another fourteen days. If that too fails, a Final Determination Order follows and is published in the Commission’s electronic filing system under a dedicated docket. Thirty days after that order is released, every provider immediately downstream must block and cease accepting all traffic from the offending provider — not the offending numbers, all of it. Downstream providers are required to watch the docket for this. That is the heaviest instrument in the whole system, and it is a commercial death sentence for a carrier rather than a penalty for a caller.
Text messages are the exception that proves the point. There the Bureau issues a Notification of Illegal Texts that names the actual numbers, and the terminating mobile provider must block all texts from them and certify that it is doing so. That order even contemplates the number’s future: if the provider learns the number has been reassigned to somebody else it must tell the Bureau and stop blocking, though it is not obliged to go looking for reassignments. So on the messaging side, reporting really can end with a specific number silenced. On the voice side, it almost never does.
Now the arithmetic that most pages will not print. In its report covering 2024 the Commission recorded one proposed forfeiture and one forfeiture order under the robocall and caller-identification provisions, the $6,000,000 penalty over the deepfake voice calls placed before a state primary election. In the same report it states that in 2024 neither the Commission nor the Attorney General collected any forfeiture penalty or criminal fine for a violation of that section, and lists ten matters referred to the Department of Justice for collection stretching back to 2018. A fine that is imposed and a fine that is paid are different events, and the gap between them is measured in years.
There is one route that can produce a remedy with your name on it, and it is a private one. The statute gives a person who has received more than one telephone call within any twelve-month period, by or on behalf of the same entity in violation of the Do Not Call regulations, the right to sue in an appropriate state court for an injunction, for actual monetary loss or up to $500 for each violation, whichever is greater, or both — with the court permitted to treble the award where it finds the violation willful or knowing, and with an affirmative defense available to a defendant who had reasonable practices and procedures in place. Notice what that route requires: a defendant who can be named, served and collected from. It is a real tool against a domestic telemarketer that ignored the registry. It is of no use against an offshore fraud room, which is precisely the caller most people are reporting. This is general information about how the provision works, not legal advice about your situation.
Six versions of the same filing
The situation you are in changes what a report can realistically do for you.
Money already moved
Report, but do not let reporting be the urgent task. The urgent task is the payment rail — the bank, the card issuer, the wire recall window, the exchange. Federal intake is a record, not a recovery mechanism, and the recall clock does not pause while a complaint is processed.
The displayed number belongs to a real stranger
Report it anyway, and say in the report that you believe the display was forged. Do not call the number back to confront its owner; you will reach someone who is also a victim of the same campaign, and the call adds nothing to the file.
Filed weeks ago, heard nothing
That is the designed behavior, not a failure. Only a complaint against your own carrier carries a written-response procedure. Everything else is aggregate input, and there is no case number to chase because no individual case was opened.
It arrived as a text, not a call
This is the branch where reporting works best. Forward the message rather than retyping it, answer the follow-up asking for the sender, and know that the messaging rules allow the Bureau to order a specific number blocked — something the voice rules do not do. Fake toll and delivery texts run as organized campaigns and get a separate walkthrough of the smishing trail.
Your business is the one being impersonated
You are in the one category of private party that can ask the consortium to start a traceback on its own behalf, subject to its policies and possibly a fee. That is a materially better position than an individual consumer occupies, and most impersonated brands never learn it exists.
An older relative is the one being called
The phone report is the smallest part. Repeated targeting of an older adult brings in adult protective services, the bank’s own escalation route and a different set of agencies, which we set out separately on reporting and tracing elder financial abuse.
Doing it properly, in the order that matters
Four steps. The first one is the one people skip, and it is the one that decides the value of the other three.
Freeze the record before it decays
Screenshot the call log entry with the timestamp visible, note your time zone, save the voicemail audio and the original message rather than a retyped copy, and write down the opening claim and the exact payment method demanded while you still remember the words.
File all three the same day
The federal fraud intake, the communications regulator’s complaint center, and your own carrier. They read different fields and feed different systems; filing one and assuming it covers the others is the most common mistake on this subject.
Work the callback number, not the display
This is where we come in. The number the caller wanted you to ring has to function, which makes it the thread worth pulling — against public filings, business registrations, court indexes and the lawful data sources open to us, with permissible purpose established first.
Substitute a document for the case number you will not get
Federal intake gives you a confirmation, not a case. What a bank’s fraud team, an insurer, a prosecutor’s intake officer or your own lawyer can act on is a dated document that shows its sources, and that is the gap this step fills.
What we are, and what we will not do
Stated plainly, because a page about reporting fraud is the wrong place to be vague about our own limits.
People Locator Skip Tracing is a skip-tracing and public-records research firm. . Nothing on this page is a filing service; we do not lodge complaints in your name, and the federal intake forms are free and take you ten minutes without us.
We are not a consumer reporting agency, and nothing we produce is a consumer report under the Fair Credit Reporting Act. Do not use our findings to decide whether to extend credit, rent a property, hire, promote or dismiss someone, write an insurance policy, or grant a professional license or a government benefit. Those decisions have to run through an FCRA-regulated screening provider, and if that is what your question really needs we will say so and point you there rather than let our work be used for a purpose it was never built for.
Every engagement starts with a stated, lawful purpose, and we decline the ones that do not have one. . . We do not obtain or hand over private financial contents — no account balances, statements, transaction histories or card data — and we cannot reach anything that requires legal process, so no call detail records, no subscriber files, no live handset location and no message contents. Anyone offering you those is describing something illegal.
We decline safety-driven work in the wrong direction. If the number frightening you belongs to a former partner or someone you have left, the right call is to law enforcement or a victim-services advocate, and if there is a protective order or an address confidentiality program involved we will not go looking for the address that program exists to conceal. We will not accept an engagement whose real purpose is to locate a person who has moved for their own safety, whatever reason is offered for it.
Everything above about statutes, rules and procedures is general information, not legal advice. Whether a particular call violated a particular provision, and what you should do about it, is a question for a lawyer who can look at your facts. Where our work fits is narrower and more useful than it sounds: turning a number into a documented, sourced file. If yours is one number inside a larger loss, that file usually belongs alongside the wider work of tracing a specific calling campaign to whoever is profiting from it.
Who ends up on this page
Six recurring readers, and what each of them actually needs from the reporting process.
People who just paid
Need the rail frozen first and the report filed second
Small businesses
Whose brand is being used on calls they never placed
Adult children
Filing on behalf of a parent who is being called repeatedly
Compliance officers
Documenting a wave of impersonation calls for a regulator
Repeat targets
Wanting to know why filing again changes nothing
Claimants and counsel
Needing the call documented to a standard someone will accept
What unites them is that the filing is never the goal. The goal is a decision somebody else has to make — a chargeback, a police intake, a regulator’s response, a demand letter — and every one of those decisions rests on how well the call was documented in the first hour.
We will not sell you an outcome the reporting system was never built to produce
Plenty of readers arrive here having filed three times and wanting somebody to promise the caller will be found. If the honest read on your number is that the filings were the right move and there is nothing further worth buying, we say so before you are charged, not after. Where there is a thread — usually the callback line rather than the display — you get a written file that shows what each finding rests on and where it is thin, so nobody mistakes a lead for a conclusion. We would rather send you away with the free federal forms than sell you a document that adds nothing to what you already filed.
Questions people ask right after filing
Does reporting a scam number actually get anyone caught?
Almost never as a result of your report alone, and no honest page should suggest otherwise. Individual reports are aggregate input. What they can produce, in volume and combined with carrier analytics, is a traceback that identifies the provider carrying the traffic, and in 2024 sixty-nine per cent of completed tracebacks ended with that provider warning or terminating the caller. That is the realistic outcome: a customer dropped, not a person arrested.
Should I report to the FTC or the FCC?
Both, because they hold different authority. The trade regulator’s intake is built around the fraud itself — what was claimed, what was taken, how the money moved. The communications regulator’s complaint center is built around the call and feeds the enforcement machinery aimed at the providers that carry illegal traffic. Filing one does not put you in the other’s system.
Why did nobody reply to my complaint?
Because a reply is only built into one procedure. The Commission’s informal complaint rules require a complaint to be forwarded to the carrier for investigation, with a written response copied to you — but that route exists for complaints against your own provider. A report about a stranger who called you is not that, so it is counted rather than answered.
Can I ask for the number to be traced?
Not directly. Tracebacks are initiated by the consortium’s member providers, by call-analytics firms, by enforcement agencies, and by organizations whose brands are being impersonated. Consumers are not on that list. The nearest thing you control is reporting through your carrier’s own tool, because that data feeds the analytics layer that flags candidates.
What does forwarding a text to 7726 do?
It hands the message, with its header data, to your wireless provider. The Commission has described providers using what consumers report through that short code to calibrate their spam filters and blocking tools. If you get an automated reply asking for the sender’s number, answer it — that exchange is what makes the report usable rather than a stray forward.
How long does a carrier have to answer a traceback request?
Twenty-four hours, under the rule that took effect at the start of 2024. The clock does not run outside business hours, and it pauses over weekends and federal holidays, so a Friday afternoon request is due the following Monday afternoon. Before that rule existed, each link in the call chain could require its own subpoena.
Can I sue the people who called me?
Sometimes, and only against a defendant you can name and collect from. The statute lets a person who received more than one call in a twelve-month period from or for the same entity, in breach of the Do Not Call rules, sue for actual loss or up to $500 per violation, which a court may treble for a willful or knowing breach. It is a real tool against a domestic telemarketer and useless against an offshore operation. This is general information, not legal advice.
What can you do that the agencies cannot?
Answer your specific question and report back to you. Agencies act on patterns; we work one number, one callback line and one loss, against public filings, business registrations, court indexes and the lawful data sources open to us, and hand you a dated file with the sourcing shown. First findings usually come back within one business day, with the fuller file following.
Filed everywhere and still have no answer?
That is the point at which the reporting system has done all it is designed to do for one person. Send us the number, the callback line and the reason it matters, and we will tell you honestly whether there is a thread worth pulling before you spend anything. Talk to the team if you would rather describe the situation first.
Have the number worked and documented
