Neighbor spoofing: why scam calls come from numbers just like yours

You notice it after a while. The robocalls have stopped coming from strange out-of-state area codes. They come from your area code now. Same first three digits as yours, too. The number on your screen looks like it belongs to someone four streets over. You almost answer, because for half a second you think maybe it's the school calling about your kid.

It's not the school. It's a well-worn trick called neighbor spoofing, and it works because it was engineered to work on exactly that half-second of hesitation.

The pattern is deliberate

Neighbor spoofing isn't a side effect of bad routing. It is a deliberate strategy. Spam operations run autodialers that generate caller IDs to match whatever area code and exchange they are dialing into. If you live in 415-555-xxxx, the call that lands might read 415-555-yyyy. The number is almost never real. It is just a label on the call that the recipient's phone trusts by default.

Compared with a random out-of-country number, a local-looking one gets a much higher pickup rate. That is the only reason the dialer bothers. It is not trying to impersonate a specific person. It is buying an extra percent or two of answered calls, at essentially zero cost.

Caller ID is a suggestion, not a signature

It helps to remember what caller ID actually is. When a call is placed, the calling party attaches a caller-identification string and the network passes it along. There is no ID check at the gate. For decades this was fine because most traffic came from carriers that behaved. Cheap voice-over-IP routes changed that.

The name on your screen is what the caller said it was. Nothing more.

Regulators in the US have pushed a framework called STIR/SHAKEN that attaches a cryptographic attestation to calls, so a compliant carrier can tell you how confident it is that the number shown is real. It helps. But plenty of spoofed traffic still slips through, especially via international gateways and small carriers that have a lot of latitude in how they sign calls.

Blocking each number stops working fast

The most common instinct is to block the number after the call. It feels satisfying. It also accomplishes very little.

A neighbor-spoofed number is almost always one-time use. The dialer fabricated it for that call. Block it and you have blocked a number that was never going to ring you again anyway. The next call will land from a different fake local number a minute later. Blocking individual numbers treats each call like a person. Each call is actually a batch.

What actually reduces the noise

A few habits compound in your favor. None of them are a complete fix, but together they shift the ratio meaningfully.

• Turn on your carrier's free call-screening feature. Every major US carrier offers one — AT&T Active Armor, T-Mobile Scam Shield, Verizon Call Filter. They intercept a lot of the obvious junk before your phone rings.
• Let unknown numbers go to voicemail. iOS has "Silence Unknown Callers," Android has a similar setting. Real callers leave a message. Spam dialers rarely do.
• Do a quick lookup before you call back. If a local-looking number leaves a voicemail, check it before redialing. You can look it up on CallTracer or a similar service to see whether other people have already flagged it.
• Report the worst offenders. The FTC takes reports at reportfraud.ftc.gov, and the FCC at fcc.gov/complaints. One report is not magic. A lot of reports against the same upstream carrier is how enforcement eventually happens.

The uncomfortable part

Here is the thing nobody likes to hear. If you are getting a lot of neighbor-spoofed calls, it is because your number is on a list somewhere. Probably several lists. Numbers end up on those lists from old data breaches, public directories, court records, sweepstakes, shopping rewards, whatever. Once you are on, you do not really come off.

Changing your number works for a few months. Eventually the new one gets scraped and resold too. The better long-term move is to assume the lists exist, filter aggressively at the phone level, and stop treating every ring as something you need to answer.

The short version

A call that matches your area code and exchange is statistically more likely to be spam than a random out-of-state one. Treat "local-looking" as a neutral signal, not a trust signal. Let unknown numbers go to voicemail. Look up anything suspicious before you call back. And if a voice on the other end tries to rush you into a decision — that is the real tell, regardless of the number on the screen.