What is spoofing?

Spoofing means making a communication appear to come from somewhere it did not, perhaps by disguising a phone number or email identity. A call can display your bank’s number without coming from your bank. Spoofing supports deception; it does not prove your own account was hacked. 12

By Secordit. Last checked: 7 November 2026.

Go to the steps · All glossary terms

How it works

  1. A criminal disguises the identity shown with a call or message. 12
  2. You see a familiar organisation or number. 12
  3. The apparent identity makes a false request easier to trust. 12

Real UK example

Report Fraud's October 2026 alert described calls appearing to come from police-force numbers. Criminals used the display to request personal or financial information.

The alert explicitly warned that caller ID was not proof of identity. A genuine-looking number was the tool of impersonation, not verification. 1

Warning signs

  • A familiar displayed number accompanies an unusual request. 12
  • A message asks for security information or a payment. 123
  • Someone insists the screen proves who they are. 12
  • The request conflicts with the organisation’s normal checking process. 12

What to do now

  1. End suspicious contact and use a number you found independently. 12
  2. Do not call back through a link or number supplied by the suspicious sender. 12
  3. Report suspicious mobile calls by texting “Call” and the number to 7726. 1245

UK reporting and support

  • If money has gone or banking details were shared, call your bank using the number on your card. Or use 159 if your bank participates. 316
  • Report fraud or hacking in England, Wales or Northern Ireland to Report Fraud. In Scotland, call Police Scotland on 101. 17
  • If someone is in danger, call 999. 7

How to protect yourself

  • Verify requests by their content and a separate trusted contact route. 12
  • Keep genuine bank and supplier contact details accessible. 123
  • Do not let a familiar display name replace a payment check. 123

Frequently asked questions

Can scammers make their number look like my bank’s?

Yes. Number spoofing can make calls or texts appear to come from a trusted organisation. 1

Is spoofing the same as phishing?

No. Spoofing disguises an identity. Phishing is the deceptive request. A phishing attempt may use spoofing to look convincing. 18

Does a spoofed email mean the real mailbox was hacked?

Not necessarily. Report Fraud distinguishes compromised accounts from convincing impersonation emails. 2

Matching kit

After a Scam: What to Do First · £7 · Digital download.

A printable UK checklist for the money, account and reporting steps. It is general information, not a recovery service.

General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.

News Pulse

Account security, explained by email.

Read about News Pulse

Sources

  1. Report Fraud, Report Fraud alert: Police forces being impersonated in scam calls using ‘spoofed’ phone numbers - Report Fraud. Accessed 7 November 2026 (Europe/London).
  2. Report Fraud, Criminals steal £101 million through Payment Diversion Fraud as City of London Police issues warning to businesses and the public - Report Fraud. Accessed 7 November 2026 (Europe/London).
  3. UK Finance, Authorised Push Payment Fraud Reimbursement | UK Finance. Accessed 7 November 2026 (Europe/London).
  4. GOV.UK, Avoid and report internet scams and phishing: Report internet scams and phishing - GOV.UK. Accessed 7 November 2026 (Europe/London).
  5. Report Fraud, How to report suspicious messages, calls and websites - Report Fraud. Accessed 7 November 2026 (Europe/London).
  6. Stop Scams UK, 159 Phone number - Stop Scams UK. Accessed 7 November 2026 (Europe/London).
  7. Police Scotland, How to report a crime - Police Scotland. Accessed 7 November 2026 (Europe/London).
  8. Report Fraud, Phishing - Report Fraud. Accessed 7 November 2026 (Europe/London).