Why the Number on Your Screen Proves Nothing
Your phone rings. The screen shows “Canada Revenue Agency” or the exact number on the back of your bank card. You feel a small wave of reassurance — at least you can see who it is.
That reassurance is exactly what the caller is counting on.
Caller ID spoofing is the practice of making any phone number appear on your screen, regardless of where the call is actually coming from. It’s technically simple to do, inexpensive, and completely legal for scammers operating from outside Canada. The result is that the number you see when a call comes in cannot, by itself, tell you who is actually calling.
How Caller ID Spoofing Works
When your phone rings, it receives a piece of data alongside the call — the number the caller has identified themselves as. In a normal call, this is accurate. But that identification field can be changed to show anything.
Scammers use internet-based phone services that allow them to set their outgoing caller ID to whatever they choose — your bank’s fraud line, the RCMP’s non-emergency number, 1-800-O-CANADA, or even your own phone number. The service your phone uses to display caller ID takes that information at face value and shows it on your screen.
There is no automatic verification happening. Your phone is just displaying what it was told.
This means a call showing “TD Bank Fraud Prevention” could be coming from anywhere in the world. A call showing “RCMP” could be a scammer in a different country entirely.
How This Is Used Against Canadians
Spoofing is the foundation of most phone-based fraud because it removes the first instinct people have to protect themselves — checking the number.
A common scenario: you receive a call from what appears to be your bank. The caller says there’s been suspicious activity on your account and they need to verify your information or transfer your funds to a “safe account.” Because the number looks right, you stay on the line.
Another scenario: a call appears to come from the CRA. The caller says you owe back taxes and face immediate legal consequences if you don’t pay today. Because it looks like the CRA, you don’t immediately dismiss it.
In both cases, the spoofed number is doing the work of making the call seem credible enough to engage with. Once you’re engaged, the social pressure and urgency take over.
What You Can Trust Instead
Here is the clearest way to think about this: a phone number appearing on your screen tells you what number the caller chose to show you. It tells you nothing about who they actually are.
So what can you trust?
You can trust a call you initiate yourself. If you hang up and call back on a number you find independently — from your bank card, from the official website, from a bill — that call is going to the real organization.
You cannot trust a call you received, no matter what number it shows.
This isn’t a reason to live in a state of suspicion. Most calls you receive are completely fine. But when a call involves urgency, requests for personal information, or asks you to take financial action, the number on your screen should not be part of your reasoning.
The One-Step Test
Whenever you’re on a call that asks you to do something — verify information, make a payment, “protect” your account — you have a simple option: tell the caller you will call back, hang up, and dial the number you find independently.
A real bank will not mind. A real CRA agent will not mind. You can call back immediately.
A scammer will push back. They’ll tell you there isn’t time. They’ll tell you that calling back will put you at risk. That resistance is the signal.
One thing to do: Save the official phone number for your bank — found on the back of your card or on their official website — in your phone contacts right now. The next time you get a call claiming to be from your bank and something feels off, hang up and call that number yourself. What they find on your account will tell you everything you need to know.
To report phone fraud in Canada, contact the Canadian Anti-Fraud Centre at 1-888-495-8501 or antifraudcentre.ca.