Caller ID said it was my bank — can that be faked?

Yes. Easily, cheaply, and by anyone.

Caller ID spoofing takes a few dollars, an internet service anyone can sign up for, and no technical skill at all. A scammer can make your phone display:

• Your bank's real name and real 800 number
• "Social Security Administration"
• Your local police department
• Your own doctor's office
• Your own phone number
• A number from your own area code and prefix, so it looks like a neighbor

Caller ID is not evidence. Treat it the way you'd treat the return address on an envelope: written by whoever sent it.

Why the system works this way

Caller ID was built in the 1980s for a phone network where everyone was a regulated phone company. It was never designed to prove identity, and there is no verification behind it. Internet calling made it trivially editable.

Phone companies are deploying a system called STIR/SHAKEN that adds a verification mark, and it helps — but it's incomplete, it doesn't cover every network, and it doesn't stop a caller who is misusing a legitimately obtained number.

Your "Scam Likely" warnings are a useful signal when they appear. Their absence means nothing.

What actually proves who's calling

Nothing, during their call. That's the point.

The only reliable verification is the call you place:

Hang up. Look up the number yourself — on your card, your statement, your bill. Call it.

If it was really your bank, you'll reach your bank and can pick up where you left off. If it wasn't, you've ended the scam without ever needing to detect it.

This is why the first step is what it is. You don't have to identify the fake. You just have to stop using their number.

"But they knew my account details"

Also not evidence. They may know:

• Your name, address, and how long you've lived there
• Your bank's name
• The last four digits of your card
• Your date of birth
• The names of your children

All of that is available from data breaches and data brokers, cheaply, on purpose. See how they got your information.

Knowing things about you proves someone bought a file. It does not prove they work anywhere.

The one sentence to keep ready

"I'm going to hang up and call the number on my card."

Say it and hang up. You don't have to wait for a response, argue, or apologize. A real employee expects this. A scammer will try to stop you — and that attempt is your answer.

What you have that they can't touch

They can fake the number on your screen. They cannot answer the phone when you call your bank.

That asymmetry is permanent, and it's entirely in your favor. One sentence — "I'll call the number on my card" — turns their strongest trick into nothing at all.

Related: The three steps · Government impersonation