Fake Websites and Spoofed Phone Numbers

Why caller ID can lie and how to spot a look-alike website address before you type your password.

Caller ID is the name or number that shows up when your phone rings. Scammers can fake it, called "spoofing," so your screen shows your bank's name or a local number, when really a scammer anywhere in the world is calling. You cannot trust caller ID to prove who is really calling.

The same trick works on a computer. A fake website can be built to look exactly like your bank's real site, down to the logo and colors, just to steal the password you type into it.

When you check a website, look closely at the address, not just the name or logo. Scammers register addresses like your-bank-login.com or amaz0n-support.com, close enough to fool a quick glance. The real address for a company is short and matches exactly what you already know, like chase.com or irs.gov.

If you are not sure, do not click a link at all. Open a new tab and type the address yourself, slowly, the way you always have.

Rule to remember: caller ID and website logos can both be faked, so always dial a number yourself and type a website address yourself instead of trusting what's shown to you.