Caller ID was never designed to be secure it's a label the caller's system supplies, the same way an email 'From' field can say anything the sender wants. Spoofing tools let scammers set that label to your bank's real support number, a local area code, or even a number identical to your own.
Anyone can set an outgoing caller ID to any number using low-cost VoIP spoofing services no hacking required, no access to the real organization's systems. Seeing a familiar number is not verification of anything.
Scammers often use a number that shares your area code and first few digits, betting you're more likely to answer something that looks local. If you don't recognize the full number, let it go to voicemail.
Hang up and dial the number printed on your card, bill, or the organization's official website never a number the caller reads out or texts you, and never 'call back' on the same number that just called you.
Call authentication standards (often called STIR/SHAKEN) are gradually making spoofed calls easier to flag, but coverage is inconsistent don't rely on your phone labeling a call as 'Spam Likely' to catch everything.
The full guide walks through how to verify any caller in under a minute, every time.
Get the guide →