Phone scams: what to do when the call seems real

Why phone scams keep working

Three things make phone scams uniquely effective:

1. Real-time pressure. Email scams give you time to think. Phone scams force decisions in seconds. Panic disables judgment.

2. Authority voice. A confident voice claiming to be the IRS, your bank, or your grandchild triggers trust that text doesn't.

3. Spoofing. Caller ID is trivially spoofed. The display can show any number — even your own bank's real number. Caller ID alone is not verification.

The top phone scam categories

1. Social Security suspension. Robocall claiming your SSN is suspended. SSNs cannot be suspended.

2. IRS arrest threats. 'Pay $3,000 in gift cards or be arrested.' IRS doesn't operate this way.

3. Grandparent emergency. 'Grandma, I'm in trouble, please send money.' Now enhanced with AI voice cloning.

4. Tech support cold call. 'This is Microsoft, your computer has a virus.' Microsoft never calls.

5. Car warranty robocalls. 'Your vehicle's warranty has expired.' Pure sales scam.

6. Medicare 'verify your number'. Harvests Medicare IDs for fraudulent billing.

7. Missed jury duty. Pay to avoid arrest. Courts don't operate by phone.

8. One-ring callback. Premium international number — calling back costs $$.

9. Bank 'fraud team' calls. 'Move your money to a safe account.' Banks never do this.

10. Lottery prize. 'You won — just pay taxes upfront.'

The five verification habits

These work for every phone call — and they're the only thing that does.

1. Hang up first. Verify second. No matter how urgent the caller makes it sound, hanging up is always safe. Real authorities understand verification.

2. Call back using a number you find yourself. Not the number that called. Not the number they give you. The number from the back of your card, from an official mail piece, or from typing the organization name into a search engine yourself.

3. Never give information you didn't initiate. If they called you, you don't owe them information. Even basic info — your address, your last 4 SSN — can fuel later scams.

4. Never read codes aloud. Any code sent to you by your bank, Apple, Google, or Microsoft is for YOUR use only. Reading it to anyone is handing them control.

5. Take a beat. Real urgency is rare. A 60-second pause to think defeats almost every scam script. If they pressure you against pausing, that's confirmation it's a scam.

How to stop the calls at the source

National Do Not Call Registry: donotcall.gov. Won't stop scammers (they ignore it) but adds legal weight to enforcement.

Carrier call screening: T-Mobile Scam Shield, Verizon Call Filter, AT&T ActiveArmor, Visible Spam Blocker. Free, on by default for most accounts.

iPhone Silence Unknown Callers: Settings → Phone → Silence Unknown Callers. Routes all non-contacts to voicemail. The single highest-impact setting on your phone.

Android call screening: Phone app → Settings → Spam protection. Google's screen-call feature lets the assistant answer suspicious calls for you.

Third-party apps: Hiya, Robokiller, Truecaller, YouMail — useful additional layers, especially Truecaller for international scam numbers.

Report calls you receive: reportfraud.ftc.gov and donotcall.gov/report — feeds enforcement data.

AI voice cloning — the new threat

Scammers can now clone any voice from 10-30 seconds of audio. A few seconds of a TikTok video, an Instagram story, or a voicemail greeting is enough to produce a deepfake voice that sounds exactly like the original.

This breaks the 'I'd recognize my grandchild's voice' instinct that prevented grandparent scams for decades.

The defense: set a family code word. A word only family knows — not a pet name, not a hometown, not anything inferable from social media. Use it whenever a call sounds like a family emergency. No code word? Hang up and call the real person's known number. Real family will answer.

Specific scam guides