Spoof calling is illegal when the caller alters the number that appears on your caller ID with the intent to defraud, cause harm, or wrongfully obtain something of value. Spoofing without that intent — a doctor’s office showing its main line instead of a personal cell, a company routing all outgoing calls through one toll-free number — is lawful. The dividing line is why the caller did it, and getting on the wrong side of that line can bring FCC fines that stack per call, a private lawsuit from the person who was called, or federal criminal charges carrying up to 20 years in prison.
What Makes a Spoofed Call Illegal
The controlling federal statute is 47 U.S.C. § 227(e), enacted as the Truth in Caller ID Act of 2009. It prohibits knowingly causing a caller ID service to display misleading or inaccurate information with the intent to defraud, cause harm, or wrongfully obtain anything of value.1Office of the Law Revision Counsel. 47 USC 227 – Restrictions on Use of Telephone Equipment Two things have to be true at once: the caller ID was manipulated, and the caller acted with one of those three prohibited intents. Showing a different number, standing alone, is not the offense.
The FCC has described how each intent shows up in practice. Intent to defraud covers the typical scam call that impersonates a bank or government agency to extract money or account credentials. Intent to cause harm reaches past financial schemes into harassment, stalking, intimidation, and violations of restraining orders.2Federal Register. Implementation of the Truth in Caller ID Act Wrongfully obtaining anything of value catches phishing calls that go after Social Security numbers or login credentials rather than cash directly.
The law is not limited to voice calls. In 2018, the RAY BAUM’S Act extended the Truth in Caller ID Act to text messaging, including SMS and MMS, and to callers located outside the United States when the recipient is inside the country.3Federal Register. Truth in Caller ID Rules A spoofed text sent from abroad to a U.S. phone falls squarely within the statute.
When Spoofing Is Legal
Everyday spoofing that lacks any prohibited intent is lawful. A physician calling a patient from a personal cell can display the medical office number so the patient has a recognizable callback line. A company can route all outbound calls through a central switch that shows one toll-free number regardless of which employee dialed. These are privacy and logistics decisions, not deception.
Law enforcement has its own explicit carve-out. Congress exempted authorized law enforcement activity and court orders that specifically permit caller ID manipulation.4Congress.gov. S. Rept. 111-96 – Truth in Caller ID Act of 2009 Federal, state, and local officers conducting investigations can spoof caller ID as part of official duties without violating the statute.
What Illegal Spoofing Can Cost You
The FCC enforces the Truth in Caller ID Act through civil forfeiture penalties assessed per call or per text. For intentional violations, the agency can add up to $10,000 per violation on top of the base forfeiture amount.5Federal Communications Commission. Caller ID Spoofing Because spoofing operations often involve thousands of calls, proposed penalties routinely reach into the millions.
The Pallone-Thune TRACED Act, signed in 2019, sharpened those tools. Before it passed, the FCC had to issue a warning citation before penalizing a first-time offender. The TRACED Act removed that requirement, so first violations can be penalized directly, and it extended the statute of limitations for spoofing violations from one year to four.6Federal Communications Commission. TRACED Act Implementation
Civil penalties are only part of the exposure. When spoofing is used in a broader fraud scheme, federal prosecutors can bring wire fraud charges under 18 U.S.C. § 1343, which reaches any scheme to defraud carried out through electronic communications crossing state lines. A spoofed call or text fits. Wire fraud carries a maximum sentence of 20 years in federal prison, rising to 30 years when the fraud affects a financial institution or involves a presidentially declared disaster.7Office of the Law Revision Counsel. 18 USC 1343 – Fraud by Wire, Radio, or Television Prosecutors can layer on identity theft charges when the operation harvested personal information.
How to Report a Spoofed Call
If a spoofed call or text was aimed at defrauding or harming you, the FCC is the primary agency to contact. Complaints go through the Consumer Complaint Center at consumercomplaints.fcc.gov.8Federal Communications Commission. FCC Complaints Filing online is the most effective method.9Federal Communications Commission. Filing an Informal Complaint Before you file, note the number shown on caller ID, the date and time, the number that was called, and what the caller said or asked for.
The Federal Trade Commission takes reports at ReportFraud.ftc.gov. The FTC analyzes complaint patterns to identify illegal calling operations and shares reported numbers publicly each business day so carriers can update their call-blocking systems.10Federal Trade Commission. ReportFraud.ftc.gov – FAQ If the caller impersonated the Social Security Administration, report it directly to the SSA’s Office of the Inspector General through its online scam form.11Office of the Inspector General – Social Security. Report Scams
Filing with more than one agency is not redundant. The FCC pursues civil enforcement against the spoofers, the FTC feeds data to call-blocking technology, and the SSA OIG investigates impersonation of its agency.
Suing the Spoofer Yourself
The Telephone Consumer Protection Act gives you a private right of action against callers who violate its restrictions on robocalls and unauthorized telemarketing. Statutory damages are $500 per violation, tripled to $1,500 per violation when the caller acted willfully.1Office of the Law Revision Counsel. 47 USC 227 – Restrictions on Use of Telephone Equipment State attorneys general can also sue on behalf of residents at the same per-violation figures, with the same trebling for knowing or willful conduct.12Federal Communications Commission. Unlawful Communications – Robocalls, Caller ID Spoofing, Do-Not-Call Registry, and Junk Faxes
The practical hurdle is identifying who was actually behind the spoofed number, since hiding identity is the point of the spoof and many operations run from overseas. When the caller traces back to a domestic business — a debt collector using fake numbers, a telemarketer hiding behind spoofed local area codes — TCPA suits work well. The per-call damages add up fast when the caller placed hundreds or thousands of calls, and cases at that scale often settle for significant sums.