Scam Busters: Caller ID Spoofing

If you have caller ID, you probably assume whatever shows up on the display is accurate and reliable.

That could be a big mistake—and a costly one.

How Spoofing Works
For tech savvy scam artists, caller ID is a favorite tool. Caller ID spoofing, where the caller manipulates the information that shows up on caller ID, making it seem like they are calling from anywhere they choose, is increasingly common. Scammers use it to trick victims into handing over their money or personal information. (Much like the fake disaster relief agencies we reported on yesterday.)

Caller ID spoofing doesn’t require a computer genius. In fact, it’s easier than you might think. There are lots of web sites that sell spoofing “calling cards” which make spoofing as simple as just punching in some numbers. Other sites enable spoofing via a web-based system.

“It’s as easy as making a phone call,” says Robert Siciliano, CEO of IDTheftSecurity.com. “Most caller ID spoofing services only require a credit card to sign up and don’t care or police how the service is used."

Scams Involving Spoofing
In one common spoofing scenario, the unwitting victim gets a call from what appears to be the local courthouse or law enforcement agency. The caller claims the person has missed jury duty, failed to pay their taxes or otherwise gotten in trouble. Naturally, the person receiving the call becomes upset and disputes this, at which point the caller helpfully offers to clear up the mistake—once the victim provides their Social Security number and other personal info.

Other variations of this scam involve crooks who appear to be calling from Western Union, a sweepstakes company (like those Publishers Clearing House scammers) or a bank.

Be warned: Spoofing can also be used by legit debt collectors and telemarketers. Although in the latter case, this violates federal regulations. The FCC prohibits telemarketers from blocking or disguising their caller ID information.