Skip to main content
Phishing & Scams·Updated 2026-10-22

What should you do if a scam number calls you?

Short answer

Hang up immediately and do not engage with the caller. Never share sensitive information, such as passwords, account numbers, or Social Security numbers. If the caller claimed to represent a bank, utility, or government agency, verify the claim independently. Look up the organization's verified contact information on its official website and contact them directly.

The details

Phone scams, also known as vishing, rely on manufactured urgency or fear to pressure you into revealing confidential data. Attackers often pose as trusted companies or agencies, claiming there is suspicious activity or an urgent billing problem with your account. Legitimate companies do not ask you to confirm sensitive personal or financial information through unexpected incoming contacts.

If you answered and spoke to the scammer, evaluate what details you disclosed. If you shared banking details or account passwords, contact your financial institution immediately to protect your accounts. You should also turn on multi-factor authentication across your critical accounts to make it harder for scammers to log in if your credentials were exposed. You can block the number using your phone settings or wireless provider tools, and report fraudulent communications directly to the FTC at ReportFraud.ftc.gov.

What to do

  • Hang up immediately without answering questions.
  • Do not share passwords, account numbers, or personal information.
  • Look up the organization's verified website to contact them directly.
  • Block the phone number using your device settings or wireless provider.
  • Report the scam to the FTC at ReportFraud.ftc.gov.
  • Contact your bank immediately if you shared financial details.

Terms explained

Vishing
Vishing is voice phishing: scam phone calls or voicemails that impersonate banks, government agencies, IT support or family members to steal money, codes or access.
Multi-factor authentication
Multi-factor authentication (MFA) requires two or more kinds of proof to sign in, such as a password plus an app prompt, security key or biometric unlock of a passkey.

Sources

Related questions