Key Takeaways
- You are probably not being singled out. Scam calls are made by automated systems dialling huge lists of numbers, many of them generated rather than stolen.
- The number on your screen may not be the number that called you. Caller ID can be faked, which is why blocking individual numbers rarely helps for long.
- Answering, or saying "hello", is not dangerous in itself. It can confirm your number is active, though, which may lead to more calls.
- The golden rule: if a call asks for money, codes, passwords or remote access, hang up and call the organisation back on a number you found yourself.
- Businesses have different options to households, because they cannot simply ignore every unknown caller.
If your phone seems to ring more often with strange numbers than with people you actually know, you are not imagining it and you are not alone. Scam calls are one of the most common complaints Australians have about their phones, and they reach home landlines, personal mobiles and business numbers alike.
The frustrating part is that the usual advice ("just block the number") often does not seem to work. The same kind of call comes back the next day from a different number. So it is worth understanding what is actually going on, because once you know how these calls are made, the steps that genuinely help make a lot more sense.
Why Scam Calls Keep Coming
It is automated, and it is cheap
Most scam calls do not start with a person picking your number. They start with software. Automated diallers can place an enormous number of calls in a short time over internet-based phone connections, at very low cost.
That changes the economics completely. If a scammer only needs a tiny fraction of people to fall for a script, it is worth calling everyone. You are not on the list because someone chose you. You are on the list because your number exists.
Your number may have been generated, not leaked
People often assume a flood of scam calls means their details have been stolen. Sometimes that is true: numbers do appear in data breaches, and they are bought and sold. But many scam lists are built simply by working through number ranges. Australian phone numbers follow predictable formats, so software can generate valid-looking numbers in sequence and dial them all.
This is also why a brand-new number can start receiving scam calls within days. Nobody leaked it. It was simply in a range that was being dialled.
Many calls come from overseas
A large share of scam operations run from outside Australia, often from organised call centres. They place calls over the internet and make them appear local. That distance makes them hard to shut down, and it is one reason the calls keep coming even as Australian networks block more of them.
Why the Number on Your Screen Cannot Be Trusted
This is the single most useful thing to understand about scam calls.
Caller ID, the number that appears on your screen, is information sent along with the call. Scammers can fake it. This is called caller ID spoofing, and it lets a call appear to come from almost any number: a local landline, a mobile that looks similar to yours, or even the real number of a bank or government agency.
Spoofing is why a scam call can show your own area code, or a number only a few digits different from your own. It is designed to look familiar enough that you answer.
Australian phone providers now operate under an industry code, registered with the Australian Communications and Media Authority (ACMA), that requires them to identify and block scam calls, including calls using invalid or spoofed caller ID. It has stopped a very large number of calls before they ever ring. But no filter catches everything, and scammers constantly change tactics. (For how caller ID works on legitimate calls, see our guide to private numbers and caller ID rules.)
Why Blocking Individual Numbers Rarely Solves It
Blocking a number feels like it should work. You block it, and that number cannot call you again. The problem is that the scammer does not need that number.
- They rotate numbers constantly. A single operation may cycle through thousands of caller IDs. Block one and the next call simply shows another.
- The number was probably fake anyway. If the caller ID was spoofed, you have blocked a number that did not really call you.
- You might block an innocent person. Spoofed calls often borrow real numbers belonging to ordinary households and businesses. The person whose number was used has no idea, and may be receiving angry calls back from strangers.
Blocking is still worth doing for a genuinely persistent nuisance caller who uses the same real number. For scam calls, though, it treats the symptom rather than the cause. The broader tools further down this article do more.
What Happens When You Answer?
Is saying "hello" dangerous?
Answering a scam call, and saying hello, does not in itself give anyone access to your money, your accounts or your phone. Nothing is installed and nothing is stolen simply because you picked up.
What answering can do is confirm that your number is active and that a real person answers it. Some automated systems record which numbers are picked up, and an active number is more valuable to a scammer than an unknown one. So answering unknown calls may lead to more of them over time. That is an annoyance, not a disaster.
Why is there silence, then a click?
If you answer and hear nothing for a second or two before a voice or a click, you have probably reached an automated dialler. These systems dial many numbers at once and only connect a person (or a recording) once someone answers. The pause is the system catching up. Hanging up at that point is perfectly reasonable.
What about the "can you hear me?" trick?
You may have heard warnings that scammers record you saying "yes" and use it to authorise purchases. That story circulates widely, but a recorded "yes" on its own is not how most people lose money. The real danger is what comes after the opening line: the conversation that talks you into sharing a code, paying a bill or installing software. Still, there is no need to answer questions from an unknown caller, and "who is calling, please?" is a perfectly good reply.
A newer concern: voice cloning
Technology now exists that can imitate a person's voice from a short recording. It is one reason some scams impersonate a family member or a manager in urgent trouble. A simple protection is to agree a check with family or staff (a question only the real person would know the answer to) and to call the person back on their usual number before acting on any urgent request for money.
The Scams You Are Most Likely to Hear
Scripts change all the time, but most fall into familiar patterns:
- Impersonating your bank, claiming suspicious activity and asking you to "verify" details or move money to a "safe" account.
- Impersonating a government agency, such as the tax office or a benefits service, threatening fines, arrest or cancelled payments.
- Tech support scams, claiming your computer, internet or phone service has a problem and asking you to install remote access software.
- Delivery and parcel scams, usually by text, asking you to pay a small fee or click a link.
- Investment and crypto offers promising returns that sound too good to be true.
- "Wangiri" or one-ring scams, where an overseas number rings once and hangs up, hoping you will call back to an expensive number.
A real bank, government agency or telco will not pressure you to act immediately, ask for your full password, ask you to read out a one-time code, or ask you to install software so they can "fix" something.
What You Can Actually Do About It
The golden rule
If a call asks for money, a password, a one-time code or remote access to a device, hang up. Then contact the organisation directly, using a number you found yourself: from their official website, the back of your card, or a bill you already have. Never use the number the caller gives you, and never call back the number that appeared on your screen.
A legitimate organisation will never mind you doing this.
Practical steps for anyone
- Let unknown calls go to voicemail. Genuine callers usually leave a message. Scammers rarely do.
- Use your phone's built-in protection. Most modern smartphones can filter or silence suspected spam and unknown callers. Look in your phone's call settings.
- Never share one-time codes. A verification code sent by text is the key to your account. No legitimate caller needs you to read it out, including your phone provider. This matters especially because scammers try to port or transfer mobile numbers to take over accounts; see how number porting works.
- Register on the Do Not Call Register. It is free and it reduces legitimate telemarketing calls. Be aware it will not stop scammers, who ignore the law anyway, but it does make the remaining unexpected calls easier to treat with suspicion.
- Treat texts the same way. Do not tap links in unexpected messages about parcels, tolls, fines or accounts. Go to the organisation's website or app directly instead.
- Report scams to Scamwatch. Reports to Scamwatch, run by the National Anti-Scam Centre, help authorities spot and disrupt new scams, even when you did not lose anything.
If you think you have been scammed
Act quickly. Contact your bank straight away using the number on your card or in your banking app, since fast action can sometimes stop or recover a payment. Change any passwords you may have shared, and report it to Scamwatch or, for cybercrime, through ReportCyber at cyber.gov.au. IDCARE, Australia's national identity and cyber support service, offers free help if your personal details may have been compromised.
Most of all, do not be embarrassed. These scams are designed by professionals to catch smart, careful people on a busy day.
If You Run a Business, It Is a Little Different
Households can silence every unknown number. Businesses cannot, because a new customer is, by definition, an unknown caller. Ignoring unfamiliar numbers means ignoring enquiries. So businesses need tools that filter without shutting the door.
Screen calls before they reach your team. A short menu or greeting in front of your main number stops most automated diallers, because they cannot respond to a prompt. An IVR system can also block specific call origins, call types or nuisance callers, and an AI receptionist can answer every call, take the details and pass on only the genuine enquiries.
Use call blocking where you have it. Features such as call blocking on virtual mobile numbers help with the persistent nuisance caller who uses the same number repeatedly, even if they cannot stop rotating scam numbers.
Train your team on the business scams. Scammers target businesses with fake invoices, calls pretending to be a supplier with "new bank details", fake telco or IT support, and urgent requests that appear to come from the boss. A simple rule helps: any change to payment details is confirmed by calling the supplier back on a number already on file. Our cyber security tips for small businesses cover more of this.
Protect your own caller ID. If scammers spoof your business number, you may start receiving confused calls from people who "missed a call from you". It is not something you did, and it usually passes. Presenting a consistent, valid business number on your genuine outbound calls helps customers recognise the real you. For business texts, registering your sender name helps too; see our guide to the SMS Sender ID Register.
The Short Version
You are getting scam calls because it is cheap to make them, your number is in a range that is being dialled, and caller ID can be faked. Blocking numbers helps with the odd persistent caller but will not stop a scam operation that simply changes numbers.
What does work is a habit: let unknown calls go to voicemail, never share codes or passwords, never act on an urgent request without calling back on a number you trust, and report what you see. For businesses, put a filter in front of your phones so real customers get through and automated diallers do not.
This article is general information, not legal or financial advice. If you believe you have lost money to a scam, contact your bank immediately.
