Someone Is Spoofing Calls From Your Own Number
You did not make those calls. Strangers are ringing you back, some of them furious, and every guide you have found tells you to rerecord your voicemail greeting and phone your carrier. This page explains what is actually happening on the network, why nothing on your account was touched, and the short honest list of things that change the outcome.
The short version
Nothing on your line was touched. Caller identification travels with a call as information supplied at the point it enters the network, and the federal rules put the duty to vouch for it on the provider that originated the call, never on the one that assigned you the number. There is no button that takes your number back. A mandatory blocking rule does exist, but the version of it a subscriber can ask for applies to numbers used for incoming calls only, which will not describe a phone you actually dial out from. Reporting is still the thing worth doing. Complaints are what identify a campaign, and campaigns are what get traced. Most of these end without you. The shape people describe is a burst of callbacks that stops about as suddenly as it started, which is why patience belongs on the remedy list rather than in place of one.
Watch: Why Your Number Is on Their Screen
Just over a minute on what a forged display really is, and what the pattern of callbacks tells you about the traffic using your number.
1:13 – your number, someone else’s call
Why Your Number Is on Their Screen
The mechanism is worth two minutes of your time, because it is what makes almost every piece of advice you have been given either useless or aimed at a different problem entirely.
Caller identification is not something the telephone network works out for itself. It is information carried alongside the call, supplied where the call enters the network, and the system was designed on the assumption that whoever supplied it had a reason to be truthful. That assumption is the entire weakness, and it is why your handset, your SIM card, your account password and your carrier’s billing records are all beside the point. Your number was typed, not taken.
The federal caller identification authentication rules say this outright in their own definitions. Under 47 CFR 64.6300(a), to authenticate caller identification information means, in the regulation’s words, the process by which a voice service provider attests to the accuracy of caller identification information transmitted with a call it originates. Read that clause again with your own week in mind. The provider doing the vouching is whichever one put the offending call onto the network. Yours did not originate it, has nothing to attest to, and is not in the signaling path at any point. That is a structural fact about the definitions the authentication rules are built on, not a shortcoming of your provider’s customer service.
Which is why the universal advice to ring your own carrier yields so little. They can confirm your line placed no such calls. They can pull your outbound records and put a note on the account. What they cannot do is reach into a call they never carried and edit your number out of it, because the display was assembled somewhere they have no relationship with and no visibility of.
One symptom deserves naming, because it pushes people toward the wrong conclusion. The numbers ringing you back frequently share your area code and the three digits after it. That resemblance is a property of a display value somebody selected, not a fact about geography, and it tells you nothing whatsoever about where any person is sitting. A number’s technical class is a more useful question than its area code, and we set out what it does and does not prove in our guide to telling a cell number from a landline or a VoIP line.
What a Forged Display Does Not Mean
Four conclusions people reach in the first hour. Three of them are wrong, and the fourth is the one that matters.
It does not mean you were hacked. No password was used, no device was reached, nothing was installed anywhere. It does not mean your carrier account was opened by anyone, because putting your number in a display field requires no relationship with your account at all. It does not usually mean you were singled out, though we will not hand you that as a certainty, because the exception is the case that matters most and it is dealt with further down this page.
The conclusion that is sometimes correct is narrower. If the calls carrying your number began at the same moment as something else, a login alert you did not trigger, a password reset you never asked for, a bill for a service you never opened, then you may be looking at two separate events that happen to share a start date. Handle them separately. A forged display needs nothing from you. The other thing needed something.
This is also where the most repeated advice on the subject goes wrong, and it goes wrong on pages that rank near the top of every search on this topic. Several of them tell you to ask your carrier for a port freeze or a number lock. Do it, but not for this. A freeze stops someone transferring your number onto a handset they control, which is a genuine and serious attack with a completely different signature: your own phone abruptly loses service. It has no bearing at all on what a stranger’s caller identification shows, and it will not reduce your callback volume by a single call.
If the wave began after your number surfaced somewhere it should not have, that exposure is worth its own look at whether your phone number has been leaked, and the wider inventory of what a number on its own puts at risk is set out in what someone can do with your phone number.
Neither of those is the cause of a spoofing wave, though. Any valid number can be dropped into that display field, which is why a number that has never appeared in public anywhere is exactly as eligible as one that has been on a billboard for a decade.
The One Rule That Could Block It, and Its Catch
There is a mandatory blocking rule that does very nearly what you want. The condition attached to it is the reason you have never been offered it.
47 CFR 64.1200(o) requires a voice service provider to block any calls purporting to originate from a number on a reasonable do-not-originate list. Mandatory, not discretionary, and the rule goes further: a list kept so thin that it omits obvious numbers which could have been included with little effort may be deemed unreasonable. Four categories of number are permitted on that list, and the first category is written for someone in your position. It covers numbers for which the subscriber to the number has requested that calls purporting to originate from that number be blocked because the number is used for inbound calls only. The rule text sits at the Commission’s blocking and traceback rule and is worth reading in full if you are about to argue with a provider.
That final clause is the whole answer to why your number cannot simply be reclaimed. The mechanism exists and it is compulsory. The price of admission is that the number never places an outgoing call. A bank’s published fraud line qualifies. A government hotline qualifies. A retired direct-dial that now only receives qualifies. A phone you dial out from does not, and if a provider added it anyway, the calls that would start disappearing are yours, because nothing downstream can separate a call that genuinely left your handset from one that merely claims to have.
There is a real asymmetry here that almost nobody mentions, and it matters if the abuse is arriving as text messages rather than calls. The parallel rule at paragraph (p) requires a mobile wireless provider to block a text message purporting to originate from a number on a reasonable do-not-originate list, and the subscriber-request category in that paragraph is written without the inbound-only condition. It reads simply as numbers for which the subscriber has requested that texts purporting to originate from that number be blocked. If your problem is messages going out under your number rather than calls, raise it with your provider in exactly those terms.
The other three categories on the voice list are numbers that are not valid, valid numbers that were never allocated to any provider, and allocated numbers a provider has confirmed are unused. Every one of them describes a number with no subscriber behind it. Yours has a subscriber, which is precisely the difficulty. If your worry has widened into what else has been attached to your number over the years, that is a separate exercise and we walk through it in finding the accounts linked to a phone number.
What Each Remedy Actually Changes
Six things you will be told to do, and the honest reading of each one.
| Step | What it changes | What it does not change |
|---|---|---|
| Documenting the callback pattern | Builds the only record that outlives the waveStart here | Nothing by itself, until it is filed or used somewhere |
| Filing a Commission consumer complaint | Puts your number into the picture enforcement staff work from | Cannot pull your number out of calls already in flight |
| Telling your own carrier | Confirms your line placed nothing and gets it noted on the account | Cannot touch a call your carrier never originated or carried |
| Asking for do-not-originate blocking | Genuinely available where the number receives calls and never places them | Would block your own outgoing calls on any ordinary line |
| Port freeze or number lock | Real protection against your number being transferred away from you | No effect whatsoever on what anyone’s caller identification displays |
| Changing your number | Ends the callbacks, at the cost of every bank, employer, school and contact holding the old one. The replacement is exactly as eligible to be displayed as its predecessor, because eligibility is nothing more than being a valid number. | |
That table is the list, not a pitch. Where our work genuinely applies is narrower and worth stating plainly: when the calls carrying your number sit on top of a fraud that has already cost somebody money, and a claim, a police report or a case now needs an identified subject rather than a forged display, that is a public records problem and it is what our skip tracing services are for. Where the wave has merely been loud and expensive in your time, the truthful answer is that reporting and patience are the remedies, and you can lodge the complaint yourself in a few minutes at the Commission’s consumer complaint center.
What STIR/SHAKEN Was Built to Do
The most cited and least understood thing in this subject. Here is its actual scope, taken from the rule rather than from a vendor blog.
Since the end of June 2021, 47 CFR 64.6301(a) has required a voice service provider to fully implement the STIR/SHAKEN authentication framework in its internet protocol networks: obtain a service provider code token from the policy administrator, use it to get a certificate, authenticate the caller identification information on the calls it originates and hands to another provider, and verify that information on calls it receives and terminates, subject to the extensions and exemptions the rule carves out for itself. Every one of those duties belongs to a provider other than yours. The obligations are laid out in the caller ID authentication rule itself.
What a signature carries is an attestation by the originating provider about its own relationship to the caller and to the number on display. It is a statement about provenance. It is not a permission slip that you issue, nobody consults you before signing, and nothing in the framework gives a subscriber standing to refuse a signature on a call claiming their number. At the receiving end, 47 CFR 64.6300(n) defines verification as the terminating provider confirming that the information was properly authenticated, which is the machinery behind the warning labels people see on their screens.
The framework also has a documented seam, and it is the honest reason unsigned calls still exist. 47 CFR 64.6303 lets a provider satisfy the non-internet-protocol obligation in one of two ways: upgrade the entire network to carry calls in the signaling protocol the framework depends on, or keep documented proof that it is participating as a member of a working group, industry standards group or consortium developing a non-internet-protocol authentication solution, or is actively testing one. Choosing the second is lawful compliance, not a violation, and it is one reason a call can cross the country and land with nothing usable attached to it. The alternative is written into the rule covering non-internet-protocol networks.
So the fair summary is that this framework was built to make calls traceable and to let terminating providers label them, not to prevent a number from being displayed. It has changed what happens after a spoofed call far more than it has changed whether one can be placed at all. The recipient’s half of this problem, meaning what a labeled call tells you and how anyone works out who is behind a scam campaign you are receiving, is handled separately in our guide to who keeps calling from a spoofed number, and this page deliberately does not repeat it.
Six Ways This Shows Up
If one of these describes your week, this page was written for you.
The two-day wave
Callbacks arrive in a burst, dozens across a day or two, then stop as abruptly as they began. That is the shape people describe most often. We have not found a published source that explains reliably why it ends when it does, and we will not invent one, but it is the version that resolves whether or not you act.
The three in the morning accusation
Someone rings to tell you that you called them in the middle of the night. You did not, and your own outgoing log is the whole answer. Photograph it before it rolls off the device, because a contemporaneous log costs you nothing today and cannot be recreated in a month.
Your own number on your own screen
A call comes in displaying the number of the phone it is ringing. Nothing is looping and nothing is broken. A display value can be set to any valid number, including yours. It is deeply disorienting, it is not evidence the handset is compromised, and it should not be answered.
The business that thinks you rang them
A utility, a clinic or a collections office tells you their system logs a call from your line. Ask them three things: the date, the time, and what the caller asked for. Those details are the most valuable thing anybody will hand you, because they place your number inside a specific, describable campaign.
A voicemail box that fills itself
Automated rejections, out-of-service recordings and silent hang-ups stack up from numbers you have never dialed. They are the failed leg of the traffic returning to the number it displayed. Clear them if you must, but keep a count of the days they arrived on.
The callback that becomes a threat
A stranger turns abusive, or tells you they are reporting you for fraud. State once that the calls were not placed from your phone, then stop engaging. If contact continues or escalates, it has stopped being a telephone problem and become a personal safety one, and it belongs with your local police rather than with any research firm.
What to Do, In Order
Four steps in this sequence, and not one of them involves doing anything to your handset.
Stop treating it as a device problem
No factory reset, no reinstall, no frantic password change in the hope it helps. None of those reach the mechanism. The single device action worth taking is silencing unknown callers for a few days so the wave passes without wrecking your week.
Capture the record while it still exists
Photograph your outgoing call log for the days in question. Log every callback: date, time, the number that rang, and what the caller says they were told. If anyone repeats the pitch, write it down in their words. This is the step nobody takes and the only one with value later.
File where the record is actually used
Send the complaint to the Commission and tell your provider in writing. Complaints identify a campaign, and a campaign is what gets traced: 47 CFR 64.1200(n)(1) requires a provider to fully respond to a traceback request from the Commission, from law enforcement or from the registered industry traceback consortium within 24 hours of receipt, on a clock defined against business hours and federal holidays.
Close the adjacent risks, then wait
Add the port freeze on its own merits. Watch for account activity, which is a different problem with different symptoms. Then let the traffic run out, because most of it does. If it does not, the record you built in step two is what a complaint, an insurer or a lawyer can actually work with.
Where Our Work Stops
Stated before you ask, because on this particular subject a confident promise is worse than an honest refusal.
People Locator Skip Tracing is a skip tracing and public records research firm. We are not licensed private investigators and we do not hold ourselves out as any, and nothing here is an offer of work that requires an investigator’s license. We open a file only where the requester has a lawful purpose for the information and can articulate what it is, and we decline where they cannot. We never pretext. We do not telephone a carrier posing as you, we do not impersonate a subscriber, an official or a family member to shake a record loose, and we do not buy from anyone who does. We do not obtain, hold or supply the contents of anyone’s private financial accounts.
There is one promise about this topic we will never make. Nobody identifies a spoofer from the forged display alone, and that includes us. The number on the screen is a claim, not a trail. What identifies the party behind a campaign is traceback across the providers that actually carried the traffic, a process run by the single consortium registered under 47 CFR 64.1203 and by enforcement agencies that can compel records. We have no access to call detail records, no window onto live network signaling, and no source that is not lawfully available. Anyone who tells you differently is selling you something.
The legal position is also narrower than the internet suggests. 47 CFR 64.1604(a) prohibits knowingly causing a caller identification service to transmit or display misleading or inaccurate caller identification information, in the rule’s own words, with the intent to defraud, cause harm, or wrongfully obtain anything of value. That intent element is doing real work, because a display that is merely inaccurate is not automatically unlawful, which is how a clinic can lawfully show its main switchboard number instead of the extension that dialed. The same section expressly protects a person who blocks a caller identification service from transmitting their own information, so if you decide to withhold your outgoing display for two weeks, the prohibition rule puts you on firm ground doing it.
Where intent is proved the consequences are substantial. The statute behind the rule, at 47 U.S.C. 227(e)(5)(A)(i), sets a forfeiture that shall not exceed ten thousand dollars for each violation, or three times that amount for each day of a continuing violation, with a ceiling of one million dollars for any single act or failure to act. That is general information and not legal advice, it is not a prediction about your situation, and a lawyer is the right person to apply any of it to you.
We are not a consumer reporting agency and nothing we produce is a consumer report. Our work may not be used to decide whether to grant credit, to hire, promote, retain or dismiss anyone, to price or underwrite an insurance policy, to approve or refuse a rental application, to issue a license or a government benefit, or for any other purpose listed in the Fair Credit Reporting Act at 15 U.S.C. 1681b. If your real question is a screening question, the right supplier is one regulated as a consumer reporting agency, and we are not a substitute for one.
One category we decline outright. If the calls carrying your number are not anonymous traffic but a specific person doing it, and that person is a former partner, a former housemate or anyone you have taken steps to be safe from, this stops being a records question. We will not research a person on behalf of a requester who is trying to reach someone who has moved away from them, and we do not accept work whose foreseeable outcome is contact with someone who has arranged not to be contactable. Ring your local police, ask the court what a protective order would require, and speak to a domestic violence advocate about whether an address confidentiality program operates where you live. We would rather lose the file than be the reason somebody is found.
Where the spoofed calls are sitting on top of an actual fraud with an identifiable loss and a person who has to be named, that is different work with a different starting point, and it begins at our phone scam caller investigation page.
Who Ends Up on This Page
The callbacks land very differently depending on what your number is attached to.
Tradespeople and sole traders
Your mobile is on the van, the invoices and the listing. The wave costs you an afternoon and teaches several dozen prospective customers to associate your number with a scam call.
Small offices with a published line
A single published main number is convenient to display. Reception spends the week absorbing accusations, and the practice carries the reputational half of it.
Holders of an inbound-only line
A published fraud line, a hotline, a direct-dial that only ever receives. This is the one group for whom the do-not-originate route under 47 CFR 64.1200(o)(1) genuinely opens, and it is worth asking your provider for it by name.
Parents and carers
The calls reach your own contacts, and the people you look after are precisely the ones least equipped to work out that the number on their screen was fabricated.
Anyone already mid-dispute
If you were in a disagreement with a neighbor, a landlord or a former colleague when the wave started, the coincidence will be read against you. Documentation is worth more here than anywhere else on this page.
People who were threatened
A callback that turned abusive changes the order of everything. Safety first, records second, and the first call goes to the police rather than to a research firm.
What all six share is that the number itself is the exposed asset and none of them can retire it cheaply. If you want to sanity-check the numbers that have been ringing you back, the class and the carrier behind each one are knowable within limits, and we set out what those limits are in working out which carrier a phone number belongs to.
What we will tell you before you pay us anything
If your situation is a spoofing wave with no financial loss and no identifiable person behind it, we will say so and turn the work away, because there is nothing lawful we can do that reporting and patience will not do better and cheaper. Where there is a real loss, a live claim, or a person who has to be identified through records rather than through a forged display, we take the file, we source every fact to a public office or a lawful data supplier, and we tell you plainly what we could not establish. We have been working public records since 2004, and the one thing we will not hand you is a confident answer we cannot support.
Questions People Ask at Two in the Morning
Someone used my number to call strangers. Has my account been compromised?
Almost certainly not. Displaying your number on an outgoing call requires no access to your account, your handset or your SIM, because caller identification is information supplied with the call rather than something the network derives from your line. If you are seeing other symptoms at the same time, a sudden loss of service, a login you did not make, a bill for a service you never opened, those are separate problems with separate causes and they deserve chasing on their own terms.
Can I stop other people’s phones from displaying my number?
Not in practice. 47 CFR 64.1200(o) does oblige providers to block calls purporting to originate from numbers on a reasonable do-not-originate list, and a subscriber can ask for their own number to be added, but the rule permits that only where the number is used for inbound calls only. An ordinary mobile or business line places outgoing calls, and adding it would block those. The mechanism is real; the condition attached to it is what puts it out of reach.
Will changing my number make it stop?
It ends the callbacks, because the traffic is displaying the old number and you will simply no longer be reachable at it. It does not make you safer. A new number is exactly as eligible as the old one, because eligibility amounts to being a valid number and nothing more. Weigh that against every bank, employer, school, insurer and contact holding the number you are about to abandon.
How long does this usually last?
We will not give you a figure, because we have not found a reliable published one and inventing a comforting number would be worse than admitting that. What we can tell you is where the off switch is not. Nothing on your handset, nothing in your account settings and nothing your own carrier can do sits on the critical path, so no amount of activity there shortens it. The shape people describe is a burst rather than a slow grind, and it ends on the far side of the network.
Am I in trouble for what the caller said on those calls?
The prohibition in 47 CFR 64.1604(a) attaches to the person who knowingly causes the misleading display with the intent to defraud, cause harm, or wrongfully obtain anything of value. That is not you. What you should do is preserve the record, meaning your outgoing call log for the relevant days and your notes of each callback, so the point can be evidenced once instead of argued repeatedly. This is general information and not legal advice; if anything arrives that reads like a legal demand, take it to a lawyer.
Does a port freeze or a number lock help with this?
It helps against a different attack. A freeze stops your number being transferred onto a device somebody else controls, which is a serious risk and worth closing. It does nothing about what a stranger’s caller identification shows, because no transfer happens in a forged display. Add the freeze, and do not expect your callback volume to move.
Can you find the person using my number?
Not from the forged display, and neither can anybody else. Identifying the origin of this traffic is done by traceback across the providers that actually carried the calls, run by the registered industry consortium and by enforcement agencies with the power to compel records. We have no access to call detail records or live signaling and we will not pretend otherwise. Where we do help is when the calls sit on top of a real fraud and a person or business has to be identified through public records for a claim or a case.
What should I say to the people ringing me back?
As little as possible, once. Tell them the calls were not placed from your phone, that your number is being displayed by someone else, and that blocking it is a perfectly reasonable thing for them to do. Do not ask for details you will not use, do not argue the point, and end the call. If a caller becomes abusive or threatening, stop responding and treat it as a safety matter rather than a telephone one.
Spoofed Calls Sitting on Top of a Real Loss?
If the traffic using your number has cost somebody money and there is now a claim, a report or a case that needs an identified subject rather than a forged display, send us what you have and we will tell you honestly whether public records can get there. Start with a short note through our contact page and we will come back within 24 hours.
Send us the details
