Spam Calls and Phone Scams: How to Detect Them and Protect Yourself

The phone rings, a number you don’t recognize shows up — or even one that looks like your bank’s — and on the other end someone is rushing you to do something: give a code, press a key, call back. Phone scams work because they catch us off guard. This article gives you the one thing that neutralizes them: knowing how each one works under the hood so you can spot it in the first few seconds and hang up in time.

The map of phone scams today

Phone scams keep growing for one very specific reason: attacking by voice and text is cheap, massive, and exploits trust. With tools that let attackers fake the number shown on your screen and auto-dial thousands of lines, a scammer can launch huge campaigns at very little cost.

The common pattern behind almost all of them is the same: urgency + authority + an irreversible action. They pose as someone with authority (your bank, a courier company, tech support), create urgency («we’ve detected a suspicious charge»), and push you into something that can’t be undone (sharing a code, making a transfer). Recognize that pattern, and you recognize the fraud no matter what disguise it wears.

Types of call fraud

Vishing (bank or support impersonation)

Vishing is voice phishing. Someone calls pretending to be your bank, a known platform, or «technical support» and, using an alarming pretext, tries to get you to give up passwords, one-time codes (OTP), or install a remote-access app. Golden rule: your bank will never ask you over the phone for your full password, PIN, or the code you receive by SMS. If they ask, it’s fraud.

Wangiri (the international missed call)

Wangiri is Japanese for «one ring and cut.» They call, let it ring once, and hang up, leaving a missed call from an international number you don’t recognize. If you call back, you connect to a premium-rate number that charges high per-minute rates, and they’ll try to keep you on the line as long as possible. The scam lies in the curiosity of calling back.

Spoofing (faking the number you see)

Caller-ID spoofing lets a scammer choose what number appears on your screen. That’s why it can show up as your bank’s real number, a government agency’s, or a known company’s. It’s the most dangerous technique because it destroys the signal we all rely on: «if my bank’s number is on the screen, it’s my bank.» That’s no longer true. More on this below.

Smishing (SMS with a link)

Vishing’s cousin over text: an SMS claiming to be from a courier company, your bank, or a tax agency, with a link leading to a fake site that captures your details. It often slips into the same message thread as legitimate texts from that company, making it even more believable. Never open the link: always go through the official app or website, typing the address yourself.

How to tell if a number is spam before answering

Check its public reputation

Many numbers used for spam and scams have already been reported by other people and show up in public call reputation databases. Checking a number before calling back tells you if there’s a complaint history. You can check a suspicious number’s reputation and origin and see its country, carrier, line type and associated risk signals in one go. This is OSINT applied to your own protection; if you want the full framework behind this discipline, see what OSINT intelligence is.

Signs from the number itself

Without checking anything, the number itself gives clues:

• An unexpected international prefix. If you have no contacts in that country, a missed call from there fits the wangiri pattern.
• Premium-rate numbers. In many countries, certain prefixes are not normal lines: they charge money per minute (for example, 803/806/807/905/118xx in Spain, or 900-numbers in the US).
• Call pattern. One ring and hang up, repeated calls at odd hours, or a number that changes slightly each time — these are automated campaign patterns.

Why the number you see can be fake

This is what almost no article explains, and it’s the key to everything. The number shown on your screen is not proof of identity: it’s a piece of data that travels with the call and, with the right tools, can be faked. The phone network was designed decades ago trusting that this data would be honest, and that trust is exactly what scammers exploit.

Practical consequence: even if your screen shows your bank’s exact name or number, that doesn’t guarantee it’s your bank. The caller ID can lie. That’s why the only safe defense is to not act on what you see on screen, but instead hang up and call back yourself using the official number on the back of your card or on the official website. If you want to dig deeper into how prefixes and origin can also be manipulated, see why a number’s prefix can mislead you.

What to NEVER do

A short checklist that saves you most of the trouble:

• Don’t call back missed calls from international numbers you weren’t expecting.
• Don’t give full passwords, PINs, or one-time codes (OTP) over the phone. No legitimate entity asks for these that way.
• Don’t press keys when a recording asks you to («press 1 for…»): it confirms your line is active and exposes you to more calls.
• Don’t install remote-access apps just because someone who called you asked.
• Don’t trust the number on your screen as proof of identity.
• Don’t rush. Urgency is the scammer’s tool. Hang up and verify on your own.

How to report and protect yourself

• Block the number on your phone to stop the harassment.
• Register with a «do not call» service where available — for example the Robinson List in Spain, the Do Not Call Registry in the US, or the Telephone Preference Service (TPS) in the UK — free services that cut down legitimate telemarketing (they won’t stop scammers, but they clear a lot of noise).
• Report and get help from your national cybersecurity or fraud helpline — for example INCIBE’s 017 helpline in Spain, or your local police/consumer protection agency — if you’ve been a victim of fraud.
• Notify your bank right away if you shared any data or code.

Checking a suspicious number with context

When a number gives you a bad feeling, don’t call it back blindly. Check it first: check a suspicious number’s reputation and origin. You’ll get the country, carrier, line type (mobile, landline or VOIP) and known risk signals, with a plain-language summary and a report with dated evidence in case you need to keep proof. And if you want to understand what can really be known about an unknown number, see the full guide on how to identify an unknown phone number.

Frequently asked questions about phone scams