This email was translated using machine translation. Please forgive us for any inaccuracies.

Check out this month's cybersecurity tip!

Cybersecurity Tip for May 2026

 

Caller ID Is Not Always What It Seems: 

How Spoofing Scams Try To Deceive You

What Is Spoofing?

Spoofing is when a caller deliberately falsifies the information transmitted to your phone’s caller ID display to disguise their identity. In some cases, you may even see your own phone number calling you—because the number shown on caller ID is data that can be fairly easily manipulated by fraudsters and is not a guarantee of who is actually on the line. 

 

Scammers frequently use “neighbor spoofing,” a tactic to make it appear that an incoming call is coming from a local number. Or they’ll spoof a number from a company or a government agency that you may already know and trust—like a bank, utility provider or even your national tax department. This technique is used to increase the chances you’ll answer their call, lower your suspicion and create confusion, so you act quickly. If you answer, they use scam scripts to try to steal your valuable personal information, which can be used in fraudulent activity.

 

How Fraudsters Are Stepping Up Call Spoofing Scams With AI

With advances in artificial intelligence (AI) and large language models, caller ID spoofing scams have grown more complex, convincing and costly. Spoofing scams are now being paired with AIgenerated voice deepfakes that replicate the voices of company executives, coworkers or even people we trust outside of work. Using just a few seconds of audio from a publicly available interview, webinar, social media post or voicemail, fraudsters can convincingly imitate not only leaders, but also friends, family members or representatives from banks and service providers. These deepfakes can closely match a person’s speaking style, cadence and tone. 

 
 

How To Protect Yourself From Spoofing Scams

You may not be able to tell right away if an incoming call is spoofed. Be extremely careful about responding to any request for personal identifying information.

  • Do not “press a number to stop future calls.” In fact, don’t interact with prompts or recordings at all. Calls that instruct you to “press a number” to do anything, or ask you to “confirm your identity,” are often used by scammers to verify active phone numbers.
  • Never share sensitive information without verifying the caller’s authenticity. Banks and legitimate organizations will not ask for passwords, PINs, one-time passcodes or full account numbers by phone, text or email.
  • Verify the source independently. If someone claims to be from your bank or another trusted organization, hang up and contact them directly using the phone number on your debit or credit card, account statement, or official website — not a phone number or email address provided by the caller.
  • Watch for a sense of urgency and pressure tactics. Calls and messages that claim your account is locked, funds are at risk or immediate action is required are designed to bypass your judgment and rush you into mistakes.
  • Be alert to “callback” scams. Fraudsters may leave voicemails or text messages urging you to return a call. Always verify the number before dialing back.

 

Taking a moment to slow down and confirm authenticity can prevent serious financial loss and protect both your personal and professional information. If you have any questions or concerns, or if you become aware of a similar incident in one of your locations, please report this to your Service Desk. 

Sources:

Federal Communications Commission. (n.d.). Caller ID spoofing. U.S. Government. https://www.fcc.gov/consumers/guides/spoofing 

TransUnion. (2024, January 26). How fraudsters are stepping up call spoofing scams with AI and deepfakes—and how businesses can fight backhttps://www.transunion.com/blog/how-fraudsters-are-stepping-up-call-spoofing-scams 

Thank you for doing your part to help keep our network and your information safe!

View Archive