17

Yesterday, I listened about caller-id spoofing and was left astonished as its misuse can result in severe consequences for victim.

Please tell me how to protect myself from this prank and is there anyway to recognize that it is a fake call?

1 Answer 1

20

You've already taken the most important first step to protecting yourself, and that it to recognize that caller-id information can be spoofed, and is not entirely trustworthy. The second step is to apply that knowledge, and stop relying on caller-id. If someone calls you and asks for personal information, even if the caller-id appears to be the legitimate number for an organization you trust, don't assume that it's true. Call them back at a number that you can independently verify is correct.

As to recognizing when caller-id is being spoofed, generally no, you can't. If there were a fail-safe way to do this, then swatting would be impossible, and we know from experience that it is not.

5
  • 8
    Agreed. Caller-ID is a convenience, not an authentication method.
    – schroeder
    Commented Mar 22, 2015 at 0:23
  • 2
    +1. CID allows for untrusted input, so can be a component of social engineering. Commented Mar 22, 2015 at 0:50
  • 3
    If you need to rely on CID, the other method would be to call the number back (assuming you originally recognize the number). Should you get some other company/person than was talking to you, it was a spoof. Or, use *69 (or whatever the automatic callback code is) to call the caller back, which doesn't depend on CID, but rather information from the telco switches (assuming I understand this feature correctly). Either way, you should never provide personal/confidential information to a caller without verifying/challenging their identity.
    – phyrfox
    Commented Mar 22, 2015 at 7:39
  • How about Google Verified Calls technology? Seems like a legit defence against Caller ID spoofing.
    – dzieciou
    Commented Jul 25, 2021 at 15:41
  • 1
    @dzieciou I would say that while it certainly looks like it has technical merit as a solution, it isn't really a practical defense given its limitations; specifically that it just isn't going to be available for most calls.
    – Xander
    Commented Jul 25, 2021 at 18:52

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .