Neighbor spoofing: ten mistakes with local-looking scam calls, and what to do instead

Six matching digits are the entire disguise. Neighbor spoofing is caller ID spoofing with one specific costume: the caller sets the displayed number to one that shares your area code and your exchange, the first six digits of a ten-digit number, so the call reads like a clinic, a school or the guy down the street. The only thing local about it is the label. The phrase is informal, not a legal category, and the same display trick turns up in legitimate "local presence" dialing by real businesses, which is why a local-looking number is a weak signal in both directions.

My mother once texted me a screenshot of a missed call that began exactly like her own number, only the last four digits different. "Is this the school?" It was a recording about a car warranty, and when I tried the number later it rang nobody. She had made, by my count, four of the ten mistakes below, and she is a careful person. The pattern is built to catch careful people. Here they are, with what to do instead.

None of the signs below proves a call is neighbor-spoofed, but they stack. The number matches yours through the sixth digit and you do not know it. The line is quiet for a second or two before a recording or a rushed voice begins. The caller will not give a callback number you can check independently. Calling the number back reaches a disconnected message, a different business or nobody. The honest test is behavioral, and it is most of what the mistakes below come down to.

Mistakes while it is ringing

1. Reading a matching prefix as proof of anything.

   Instead: treat six shared digits as decoration. Caller ID is data the caller supplies, and the signing system behind the verified checkmark checks whether a caller is authorized to use a number, not where the caller sits. Few people ever compare those six digits against anyone they actually know, and that is the gap the trick lives in.

2. Answering "in case it's the school."

   Instead: let it ring through. Declining feels risky, which is the point of a local number. A real school, clinic or contractor will leave a voicemail with a name, a reason and a number you can check. A spoofed call leaves a script, silence or nothing. A caller does not need a high success rate, only enough people saying hello to mark the line as live.

3. Pressing 1 "to be removed from the list."

   Instead: hang up. A key press tells the system a human is on the line. A real opt-out goes through the company's own website or the number printed on a bill, not through a stranger's menu.

4. Calling the number back.

   Instead: do not. A spoofed number often belongs to an innocent subscriber whose line was borrowed, so you may wake up a stranger, or reach a disconnected message, a different business or nobody at all. The callback tells you nothing about who really called.

Mistakes in judging the caller

5. Believing the caller who says they are a local business.

   Instead: look at what they ask for. Gift cards, wire transfers, cryptocurrency and a demand for a verification code are red flags no matter what the number looks like. Hang up and call the organization back on a number from its own website, or the back of your card.

6. Assuming a verified badge makes it safe.

   Instead: use the badge as a mild point in a call's favor and nothing more. A caller with a legitimately rented local number and full attestation can still run a scam, which is the whole subject of why a verified call can still be a scam. The badge answers a narrow question about the number.

7. Blocking the whole area code.

   Instead: remember that the code being copied is your own. Blocking 212 if you live in Manhattan, or 415 if you live in San Francisco, would silence your real neighbors along with the fakes. A few call-blocking apps support prefix rules, and they can help if one specific prefix is hammering you, but they are blunt. Silencing unknown callers is gentler, because it sends everything outside your contacts to voicemail and lets you decide.

Mistakes in setup and afterwards

8. Skipping the Do Not Call Registry because "scammers ignore it."

   Instead: register anyway. The National Do Not Call Registry has existed since 2003, and you can sign up at donotcall.gov or by calling 1-888-382-1222 from the phone you want to register. It tells legitimate telemarketers to leave you alone. It does not stop scammers, and it does not cover political calls, charities or surveys. Its real use is sorting: a company that breaks the rule is worth reporting, and a caller who ignores it entirely has told you something about who they are.

9. Forgetting the voicemail tab after turning on Silence Unknown Callers.

   Instead: on an iPhone go to Settings > Phone > Silence Unknown Callers, and then actually look at voicemail once or twice a day. In Google's Phone app the spam filter lives under Phone > the three-dot menu > Settings > Caller ID & spam. A doctor's office or a delivery driver you were not expecting will land in voicemail along with the junk, so if you are waiting on an unknown number, switch the setting off for a day.

10. Chasing each new number, or not reporting because "the number is fake anyway."

    Instead: report the pattern at ReportFraud.ftc.gov. A report helps even when the number itself was borrowed, because patterns are what investigators work from. If the calls keep arriving from different numbers, that is the usual shape of a campaign, and the reason a single block rarely sticks is laid out in why blocking spoofed numbers fails.

A caution in the other direction. Some real companies show local numbers on purpose so their calls feel familiar, and some spoofing is benign, such as a doctor's office calling from a personal phone while showing the clinic's main line. Neither is an attack, but both teach the same lesson, that a local number is a weak signal whichever way it points. If a call asks for money or a verification code, the number stops mattering. Hang up and call the organization back on a number from its own site.

One more situation belongs next to these. If strangers start calling you back about calls you never made, your number is the one being borrowed, which is the reverse problem. The steps for that are in what to do if someone uses your number. And when the voice claims to be an official office, the same logic carries over to spoofed government numbers.