← All posts

Why Do Spam Calls Come From My Own Area Code?

The number looks like your neighbor's. Same area code, same first three digits, maybe one digit off from your own phone number. So you answer.

It's not your neighbor. It was never your neighbor. The number on your screen was manufactured specifically to make you think that.

That "local" number calling you isn't local

This trick has a name: neighbor spoofing. Callers display a number that shares your area code and prefix, because people answer calls that look local far more often than calls from numbers they don't recognize. It's not a glitch in your phone and it's not a coincidence. It's a deliberate choice made by whoever is calling you, designed around one fact about human behavior: familiarity gets answered.

The number was never tied to a location in any way that matters. It's a label, picked to get past your judgment before you've had a chance to use it.

How neighbor spoofing actually works

Caller ID was built on an honor system. When a call connects, the network mostly trusts whatever number the caller says it's calling from, the same way an envelope trusts whatever return address you write on it. Nothing verifies it by default.

VoIP calling made that honor system trivial to abuse at scale. Anyone running an auto-dialer can set the outgoing caller ID to any number they want, including one that matches yours almost digit for digit. One batch of calls might show your area code. The next batch, from the same system, might show a different one entirely. The number changes. The setup behind it doesn't.

So the "who's calling" information your phone shows you isn't a record of anything. It's a guess the caller made about what you're most likely to pick up for.

Why this makes blocking and detection a losing game

Here's the part that matters more than the trick itself: that spoofed number cost nothing to create and nothing to throw away. Block it, and the caller isn't inconvenienced. They weren't attached to that number in the first place. They just pick a new one, matching a different area code, for the next batch of calls.

A blocklist works by identifying bad numbers and stopping them. Neighbor spoofing breaks the premise underneath that entirely, because there's no such thing as a stable bad number to find. Every number is disposable and every number is free. You'd need to block an infinite, constantly refreshing list to keep up, which is another way of saying you can't keep up.

This is true even for apps built specifically to catch these calls. Detection just means reacting faster to a number that's already been abandoned by the time you've flagged it. Faster reaction is still reaction. It's still one step behind, just a shorter step.

The real question isn't which numbers to trust

Every explainer on neighbor spoofing (ours included, until now) tends to land in the same place: here's the trick, now go be more careful about which numbers you answer. That's reasonable advice and it will not fix anything, because the premise it rests on is broken. You cannot reliably sort numbers into safe and unsafe when the unsafe ones are built to look exactly like the safe ones, on purpose, and swapped out before you've finished sorting.

The actual flaw isn't that you picked the wrong number to trust. It's that any number, real or invented, gets to reach you without proving anything first. Caller ID was never a trust system. It was a label system that everyone agreed to treat like a trust system, right up until it became easy to fake.

What actually has to change

If the number on the screen can't tell you anything reliable, the fix isn't a sharper eye for spotting fakes. It's not needing to make that call at all.

Unknown callers should have to clear a small bar before the phone ever rings for you, something a stranger spoofing a random number can't fake on the way in. Say the right thing, or in Haloa's case, enter a Pass you've given only to people you actually expect to hear from, and the call goes through. Don't have one, and it doesn't get the chance to gamble on your area code looking familiar.

The people already in your life skip this entirely. They call, it rings, nothing changes for them. What disappears is everyone else's ability to borrow your own area code to get past you.

This is what Haloa does instead

Haloa requires unknown callers to enter a Pass before a call connects. You decide who gets one: trusted contacts never need it and ring through exactly like they always have. Everyone else, including a number dressed up to look like it's calling from three streets over, has to prove they're allowed in before your phone ever rings.

It doesn't matter whose area code they borrowed. Without a Pass, borrowing your neighbor's digits doesn't get them any further than borrowing nobody's at all.

Neighbor spoofing is exactly why blocking a number doesn't actually fix anything: the number was never real to begin with, so there was never anything stable to block.

See how Haloa works