Europol is calling for a coordinated European response to tackle caller ID spoofing, an increasingly common tool, used for online fraud and social engineering scams. Caller ID spoofing occurs when criminals falsify the information displayed on phones, making numbers appear legitimate to deceive victims. This practice is driving substantial financial and societal harm, with an estimated EUR 850 million lost worldwide each year.

A borderless threat

Caller ID spoofing is increasingly exploited by organised criminal networks operating across multiple jurisdictions. Fraudsters impersonate banks, government agencies, or even family members to gain trust. Some use it for so-called swatting incidents, making false emergency calls from a victim’s address, triggering large-scale emergency responses.

Investigations show the emergence of a “spoofing-as-a-service” business model, providing ready-made tools for impersonating trusted entities such as law enforcement or financial institutions. Operating from abroad, these networks exploit jurisdictional gaps to evade detection and prosecution.

Europol’s call for action

The current imbalance, where spoofing is easy to commit but hard to investigate, is unsustainable. Europol is urging measures that make it more costly and technically complex for criminals to hide behind spoofed identities, while enabling investigators to act swiftly across borders.

A Europol survey conducted across 23 countries revealed significant challenges in implementing anti-caller-ID spoofing measures. This means that the combined population of approximately 400 million people remain susceptible to these types of attacks.

Law enforcement highlighted major obstacles, including limited cooperation with telecom operators, fragmented regulations, and a lack of technical tools to identify and block spoofed calls.

Towards a coordinated European response

Europol and its partners have identified three priorities:

• Harmonised technical standards: develop EU-wide mechanisms to trace fraudulent calls, verify legitimate caller IDs, and block deceptive traffic.
• Enhanced cross-border collaboration: strengthen cooperation between law enforcement, regulators, and industry to share intelligence and evidence efficiently.
• Regulatory convergence: align national rules to enable lawful traceback, clarify legitimate uses of caller ID masking, and promote proven anti-fraud tools.

While anti-spoofing measures are essential, law enforcement expects criminals to adapt. Emerging threats such as SIM-based scams, anonymous prepaid services, and smishing schemes will require continued vigilance and cross-sector cooperation.

Europol’s proposed measures support the ProtectEU strategy, strengthening Europe’s collective capacity to combat organised crime and protect citizens from online and offline threats. Through sustained multi-stakeholder collaboration, Europe can restore integrity to its communication networks and reduce the growing harm caused by caller ID spoofing.