False number, real damage: Europol calls for action against caller ID spoofing

Brussels – Europol calls for a coordinated European response to counter caller ID spoofing, an increasingly popular tool used for online fraud and social engineering scams. Caller ID spoofing occurs when criminals falsify the information displayed on phones, making numbers appear legitimate to deceive victims. This practice is causing substantial financial and social harm, with an estimated EUR 850 million lost worldwide each year.

The “European Police” warns that phone calls and text messages remain the main entry point for these scams, accounting for approximately 64 percent of reported cases. By hiding their true identities and locations, criminals trick victims into revealing personal information, transferring funds, or granting access to devices and accounts, making it extremely difficult for law enforcement to trace and prosecute them.

A borderless threat 

 Organized criminal networks operating in multiple jurisdictions are increasingly exploiting caller ID spoofing. Fraudsters pose as banks, government agencies, or even family members to gain victims’ trust. Some use it for so-called swatting incidents, making fake emergency calls from the victim’s address and causing large-scale emergency interventions.

Investigations show the emergence of a “spoofing-as-a-service” business model, providing ready-made tools for impersonating trusted entities such as law enforcement or financial institutions. Operating from abroad, these networks exploit jurisdictional gaps to evade detection and prosecution.

Europol’s call for action

The current imbalance, where spoofing is easy to commit but hard to investigate, “is unsustainable.” Europol is urging measures that make it more costly and technically complex for criminals to hide behind spoofed identities, while enabling investigators to act swiftly across borders.

 A Europol survey conducted across 23 countries revealed significant challenges in implementing anti-caller-ID spoofing measures. This means that the combined population of approximately 400 million people remains susceptible to such attacks.

Law enforcement highlighted major obstacles, including limited cooperation with telecom operators, fragmented regulations, and a lack of technical tools to identify and block spoofed calls.

Towards a coordinated European response

Europol and its partners have identified three priorities:

• Harmonised technical standards: develop EU-wide mechanisms to trace fraudulent calls, verify legitimate caller IDs, and block deceptive traffic.
• Enhanced cross-border collaboration: strengthen cooperation between law enforcement, regulators, and industry to share intelligence and evidence efficiently. 
• More cross-border cooperation: strengthen collaboration among law enforcement, regulators, and industry to share information and evidence efficiently 
• Regulatory convergence: align national rules to enable lawful traceback, clarify legitimate uses of caller ID masking, and promote proven anti-fraud tools.

Although anti-spoofing measures are essential, law enforcement agencies anticipate that criminals will adapt. Emerging threats, such as SIM-based scams, anonymous prepaid services, and smishing schemes, will require constant vigilance and cross-sector cooperation. 

Europol’s proposed measures support the ProtectEU strategy, strengthening Europe’s collective capacity to combat organised crime and protect citizens from online and offline threats. Through sustained multi-stakeholder collaboration, Europe can restore integrity to its communication networks and reduce the growing harm caused by caller ID spoofing.