The number on your screen is a label. It is not a proof of identity. Caller ID, sometimes called CLI, can be copied, borrowed, or invented. A call can display a local 01 or 02 landline, a UK 07 mobile, a bank’s published number, or even your own number. None of that tells you where the voice is sitting.
Treat the display as a clue to write down, not as a reason to obey. If the story is about money, tax, a parcel, or remote access, hang up and use a contact method you already trust. Search the displayed number on WhoCalledMe to see whether other people reported a similar script. Reports are not a finding that a private person committed a crime. They cannot name the owner of a mobile from the digits alone.
Display is not the source
Telephone networks were not built to guarantee that the calling number is true. Spoofing exploits that gap. Fraudsters pick a number that makes you more likely to answer. A local prefix looks like a neighbour, a school, or a nearby business. A number that matches a bank or HMRC look-up looks like official business. Your own number on the inbound display is meant to confuse you into thinking the phone has malfunctioned, so you stay on the line.
Spoofing also explains why blocking one number does not end a campaign. The next call can show a different line while the voice and the script stay the same. The display changed. The operation did not.
If a friend says they “called you” and you saw a different number, that is possible too, but it is not something to diagnose on a live scam call. End the suspicious call first. Speak to the friend on a number you already have.
Local 01, 02, and 07 numbers
UK geographic numbers beginning 01 or 02, and mobile numbers beginning 07, are widely spoofed. A Bradford or Bristol prefix does not mean the caller is in that city. An 07 display does not mean you can look up a person’s name and knock on their door. WhoCalledMe cannot identify a private mobile owner from CLI. Publishing a guess about a neighbour would be unfair and often wrong.
What you can do is record the digits as they appeared. Search them. If community reports mention a bank fraud team, a parcel fee, or a tax recording, you have a pattern. Still hang up and verify through official channels. A genuine local garage might also show an 01 number. The difference is the request. Local businesses you already use will not ask for one-time passcodes or AnyDesk.
Missed calls from local-looking numbers are covered in the silent-call guide. Do not ring them back solely because they look nearby.
Banks, HMRC, and other trusted names on the screen
Bank impersonation and HMRC scams often spoof numbers people can find online. The display may match a genuine switchboard. The voice may still ask for a safe-account transfer, an OTP, or payment in vouchers. UK banks would rather you call 159 or the number on your card than trust an inbound display. HMRC would rather you use GOV.UK and your Personal Tax Account than a number that popped up on a mobile.
Couriers such as Royal Mail, Evri, and DPD are spoofed in the same way. So are broadband names such as BT, EE, O2, Vodafone, Three, and Virgin Media. Apple Pay might be mentioned to make a payment sound modern. A trusted brand on the screen is part of the costume.
If you answered and the story felt rushed, you did nothing wrong. Hang up. Call 159 for a bank. Use GOV.UK for tax. Open the courier’s official app from your home screen. Take Five: stop, challenge, protect.
Why one scam uses many numbers
Number rotation keeps blocking from working. It also keeps any single line from gathering too many complaints too quickly. One afternoon you may see three local landlines and two mobiles, all reading the same fraud-team script. That is one operation with many costumes.
On WhoCalledMe, put every number on one factual report. Describe the claim, not a person. Say the display looked like a bank, HMRC, or a neighbour’s prefix. Do not accuse a private individual whose number may have been spoofed. The real owner of a spoofed line is often a victim of the display, not the caller.
Action Fraud can take a fraud report. The ICO is more relevant for persistent live marketing. Ofcom has an interest in CLI and nuisance calls at a system level. You do not have to pick every body. Start with hanging up, protecting money, and a clear note of the numbers shown.
What WhoCalledMe can and cannot do
WhoCalledMe can store community reports against a number as it was displayed. It can help you decide not to call back. It cannot prove the source of a spoofed call. It cannot name a private mobile owner from CLI. It cannot tell a bank that a payment is fraudulent. You still need 159, the bank, and Action Fraud if money moved.
When you report, stick to facts: time, displayed number, what they asked. If the caller kept changing line, add all the numbers. Do not paste card numbers, OTPs, or screenshots of Apple Pay. Do not publish someone else’s full name because it appeared in your phone book next to a similar number.
Spoofing is why “but it said it was the bank” is so common. Believe the process you start yourself, not the digits that arrived with the ring. Search, report factually, and treat the screen as untrusted until official channels agree.
Common warning signs
- A local-looking number you do not recognise.
- A call that appears to be from your bank, HMRC or a courier, but the story feels rushed.
- Your own number showing as the caller.
- The same organisation “calling” from several different numbers in one day.
What you should do
- Treat caller ID as a clue, not as proof.
- Hang up and call the organisation back on an official number.
- Search the displayed number on WhoCalledMe for community reports.
- Never share codes or personal details because the number “looked right”.
- Read our other Safety Centre guides if the caller claimed to be a bank, HMRC or a courier.
