Blog

Spoof, There It Is

posted by

David Pawelczyk

Spoof, there it is!

Unmasking the tools, tactics & trends behind caller ID fraud

AT A LOSS

According to the Federal Trade Commission in 2024, consumers reported that most fraud cases involved imposter scams, with phone scams resulting in the greatest financial losses per individual. The FTC noted $1,500 was the median loss per person¹.

HOW SPOOFING WORKS²

Spoofing occurs when someone intentionally alters the caller ID information that appears in incoming calls to hide their real identity.

Typically, scammers use local numbers relevant to the recipient or spoof a number from a trusted organization to enhance the chances of engaging with the receiver.

• Call spoofing is done by using VoIP tools (Voice over Internet Protocol) via the internet. It allows scammers to use the internet to conduct calls using fake or alternated phone numbers to mask the calling number.
• Some scammers even configure their VoIP software to change the display name of the caller ID to avoid call-backs.
• There are various VoIP software tools available online and in the underground that provide this service.We detail a few notable tools in this report.

If the spoofed call is answered,the scammer will attempt to persuade the caller into giving up personal information or steal funds by using social engineering tactics.

THE SERVICES & THEIR CAPABILITIES

There are dozens of different spoofing services available on the Dark Web,the clear web, and encrypted messaging platforms such as Telegram.

First, open-source spoofing tools include websites and applications that allow users to protect their phone number by replacing it with another number of their choosing.Popular tools include Spooftel, Spoofbox, and Phone Gangster.

Despite being publicly available, these platforms are equipped with advanced capabilities ata low cost. For example, Spooftel, with over 1.7 million users, offers call recording, soundboards, voice changing, and custom voicemail messages with prices starting at $5 for 50 minutes of calls.

Telegram is also a popular platform for fraudsters to share call spoofing technology.These tools advertise the ability to use multiple caller IDs, hold music, use of bank names, voice changers, among other capabilities.

Telegram spoofing services also emphasize their global coverage, allowing fraudsters to make calls from a variety of locations and change the country codes in their spoofed numbers to further their authenticity. Prices vary, but one service has plans ranging from $250 for 2 weeks to $400 for one month of spoofing.

Lastly, dark web forums provide another arena for fraudsters to advertise call spoofing tools.

Some services are priced at 55 cents per minute, while others opt for a different cost structure and have rates starting as high as $500.

Overall, there are abundant call spoofing options available to fraudsters with powerful capabilities that are designed to trick victims into believing they are providing their information to a genuine organization.

CONSIDERATIONS

As spoofing services continue to develop and enhance their capabilities, exploring third-party solutions may help with caller ID authentication. A few examples of enterprise products include:

• TruContact, a TransUnion product that authenticates outbound calls, blocks illegitimate calls, and allows logos and reasons for the call to be displayed to assure customers that the call is genuine.³
• Hiya is a call protection and identity management company that uses AI to detect and mitigate spam calls.⁴
• Lastly, Orchestra One™ is a product from SecureLogix that auto-authenticates calls in real-time with questionable calls receiving additional filtering and evaluation.⁵

Additionally, organizations should consider adding banners to their websites and sending out newsletters to their customers warning them about social engineering calls, how to identify them, and what to do if they receive a suspicious call.

---