Phone calls and text messages remain the primary entry point for these scams, representing roughly 64% of reported cases. By hiding their true identities and locations, criminals trick victims into revealing personal information, transferring funds, or granting access to devices and accounts, making it extremely difficult for law enforcement to trace and prosecute them.A borderless threatCaller ID spoofing is increasingly exploited by organised criminal networks operating across multiple jurisdictions. Fraudsters impersonate banks, government agencies, or even family members to gain trust. Some use it for so-called swatting incidents, making false emergency calls from a victim’s address, triggering large-scale emergency responses.Investigations show the emergence of a “spoofing-as-a-service” business model, providing ready-made tools for impersonating trusted entities such as law enforcement or financial institutions. Operating from abroad, these networks exploit jurisdictional gaps to evade detection and prosecution.Europol’s call for actionThe current imbalance, where spoofing is easy to commit but hard to investigate, is unsustainable. Europol is urging measures that make it more costly and technically complex for criminals to hide behind spoofed identities, while enabling investigators to act swiftly across borders.A Europol survey conducted across 23 countries revealed significant challenges in implementing anti-caller-ID spoofing measures. This means that the combined population of approximately 400 million people remain susceptible to these types of attacks.Law enforcement highlighted major obstacles, including limited cooperation with telecom operators, fragmented regulations, and a lack of technical tools to identify and block spoofed calls.Towards a coordinated European responseEuropol and its partners have identified three priorities:Harmonised technical standards: develop EU-wide mechanisms to trace fraudulent calls, verify legitimate caller IDs, and block deceptive traffic.Enhanced cross-border collaboration: strengthen cooperation between law enforcement, regulators, and industry to share intelligence and evidence efficiently.Regulatory convergence: align national rules to enable lawful traceback, clarify legitimate uses of caller ID masking, and promote proven anti-fraud tools.While anti-spoofing measures are essential, law enforcement expects criminals to adapt. Emerging threats such as SIM-based scams, anonymous prepaid services, and smishing schemes will require continued vigilance and cross-sector cooperation.Europol’s proposed measures support the ProtectEU strategy, strengthening Europe’s collective capacity to combat organised crime and protect citizens from online and offline threats. Through sustained multi-stakeholder collaboration, Europe can restore integrity to its communication networks and reduce the growing harm caused by caller ID spoofing.
Fake number, real damage: Europol urges action against caller ID spoofing