Phone Scams: How to Block and Report 2026

Phone Scam Statistics 2026

Phone scams remain one of the most pervasive forms of fraud in the United States. According to the FTC's Consumer Sentinel Network, Americans reported losing $10.3 billion to phone-based scams in 2024, a figure that has grown annually since tracking began. The median individual loss from phone scams was $1,480, significantly higher than losses from email or social media scams. In 2025, the FBI's Internet Crime Complaint Center (IC3) reported that phone-initiated fraud accounted for 38% of all reported financial fraud.

The volume of scam calls has decreased slightly since the implementation of STIR/SHAKEN caller authentication protocols, but the sophistication of calls that do get through has increased dramatically. AI voice cloning, deepfake audio, and advanced social engineering techniques have replaced the obvious robocall scripts of earlier years. Scammers now use AI to clone voices of family members, create convincing automated systems that mimic legitimate businesses, and personalize calls using data harvested from social media and data breaches.

The demographics most affected by phone scams in 2026 are adults over 60, who report the highest median losses, and adults aged 20-29, who report the highest number of incidents. No age group is immune. Understanding the current threat landscape and implementing available protection tools is essential for everyone.

Types of Phone Scams

Phone scams in 2026 fall into several major categories, each with distinct tactics and targets. Recognizing the type of scam you are encountering is the first step toward protecting yourself.

Vishing (Voice Phishing)

Vishing calls impersonate legitimate organizations to extract personal or financial information. The caller claims to be from your bank, the IRS, Medicare, Social Security Administration, a tech company, or law enforcement. They create urgency by claiming your account has been compromised, you owe back taxes, your Social Security number has been used in a crime, or your computer has been infected with malware. The goal is to get you to provide account numbers, Social Security numbers, passwords, or to make immediate payments via gift cards, wire transfers, or cryptocurrency.

Tech Support Scams

Callers claim to be from Microsoft, Apple, or your internet service provider, warning that your computer or device has been compromised. They request remote access to your device, which they then use to install malware, steal data, or create a fake problem they charge you to fix. Microsoft and Apple do not make unsolicited calls about device security issues. Any such call is a scam, without exception.

Grandparent Scams

A caller pretends to be a grandchild or other relative in an emergency, typically claiming to be in jail, in a car accident, or stranded in a foreign country. They ask for immediate money, usually via wire transfer or gift cards, and beg the victim not to tell other family members. In 2026, AI voice cloning has made this scam exponentially more convincing, as scammers can replicate the relative's actual voice from social media audio or voicemail recordings.

Prize and Lottery Scams

You are informed that you have won a lottery, sweepstakes, or prize, but must pay fees, taxes, or processing costs before receiving your winnings. No legitimate lottery or sweepstakes requires upfront payment. If you did not enter a contest, you did not win one. The FTC has consistently listed prize scams among the top reported fraud categories.

AI Voice Cloning Scams

AI voice cloning represents the most dangerous evolution in phone scams in 2026. Voice cloning technology has advanced to the point where a convincing replica of someone's voice can be generated from as little as 3-5 seconds of audio. This audio can be harvested from social media videos, voicemail greetings, YouTube content, podcasts, or any other publicly available recording.

Scammers use cloned voices in several ways. In family emergency scams, they clone a family member's voice and call relatives claiming to be in an emergency requiring immediate money. In business email compromise (BEC) calls, they clone a CEO or executive's voice to call finance employees and authorize fraudulent wire transfers. The FBI reported over $2.7 billion in BEC losses in 2024, with voice cloning increasingly used as part of these schemes.

The technology is commercially available and inexpensive. Services offering voice cloning for as little as $5 per month have made this tool accessible to small-scale scammers, not just sophisticated criminal organizations. The FTC issued its first enforcement actions related to AI voice cloning scams in 2025, but the technology outpaces regulation.

Protecting Against Voice Cloning

• Establish a family code word: Create a verbal password that only your family knows. In any emergency call, ask for the code word before taking any action. Do not share this code word digitally or on social media
• Verify independently: If you receive an emergency call from a family member, hang up and call them back at their known number. If they do not answer, call another family member to verify the situation
• Limit public audio: Be aware that any audio you post publicly can be used for voice cloning. Consider the privacy settings on social media videos and voice messages
• Be suspicious of urgency: Scammers use time pressure to prevent you from thinking critically or verifying. Legitimate emergencies can wait 2 minutes while you verify the call
• Ask verification questions: Ask questions that only the real person would know, beyond what could be found on social media

Robocalls and Spoofing

Despite the implementation of STIR/SHAKEN protocols required by the FCC under the TRACED Act of 2019, Americans still receive an estimated 4 billion robocalls per month in 2026. The technology has reduced illegal spoofing from domestic numbers significantly, but scammers have adapted by routing calls through international gateways, using VoIP services that bypass STIR/SHAKEN, and operating from countries where enforcement is minimal.

Caller ID spoofing makes a call appear to come from a local number, a known business, or even a government agency. The STIR/SHAKEN framework adds an attestation level (A, B, or C) to each call, indicating the carrier's confidence that the caller ID is legitimate. Full attestation (A) means the carrier has verified the caller. Partial (B) and gateway (C) attestations provide less certainty.

Carrier-Level Call Blocking

• AT&T ActiveArmor: Free tier blocks fraud calls automatically and labels suspected spam. Advanced tier ($3.99/month) adds reverse number lookup and additional blocking features
• T-Mobile Scam Shield: Free for all T-Mobile customers. Identifies and blocks scam calls automatically. Scam ID labels suspicious calls on screen. Premium tier ($4/month) adds caller ID for unknown numbers
• Verizon Call Filter: Free basic spam detection and filtering for all Verizon customers. Plus tier ($2.99/month) adds caller ID, spam lookup, and a personal block list with up to 500 numbers

Smishing: Text Message Scams

Smishing (SMS phishing) has surpassed voice calls as the fastest-growing phone scam category. The FTC reported a 400% increase in text message scam complaints between 2021 and 2025. Scam texts are cheap to send in bulk, difficult to trace internationally, and have higher open rates than emails, making them highly effective for mass targeting.

Common smishing messages in 2026 include fake delivery notifications from USPS, UPS, FedEx, and Amazon claiming a package cannot be delivered and requiring you to click a link. Fake bank alerts about suspicious account activity directing you to a phishing login page. Fake toll road or parking violation notices requiring immediate payment to avoid penalties. And fake two-factor authentication codes designed to steal your real login credentials through social engineering.

How to Handle Suspicious Texts

• Do not click links in unexpected text messages, even if they appear to come from a known company or government agency
• Forward suspicious texts to 7726 (SPAM) to report them to your carrier for investigation
• If a text claims to be from your bank, open your banking app directly or call the number on your debit card instead of clicking any links
• Enable spam filtering on your phone: iPhone Settings > Messages > Filter Unknown Senders; Android Messages > Settings > Spam Protection
• Never reply to suspicious texts, even to say "STOP." Replying confirms your number is active and may increase scam volume

Government Impersonation Scams

Government impersonation scams were the number one fraud category reported to the FTC in 2024, with over 900,000 reports. Scammers impersonate the IRS, Social Security Administration, Medicare, U.S. Customs and Border Protection, and law enforcement agencies. These scams are effective because they exploit fear of government authority and create urgency through threats of arrest, account freezing, or benefit cancellation.

Key facts about how real government agencies contact you: the IRS initiates contact by mail, not phone, for tax matters. The Social Security Administration may call in limited circumstances but will never threaten to suspend your Social Security number, demand immediate payment, or ask for gift cards. Medicare will never call unsolicited to offer free equipment or ask for your Medicare number. Law enforcement agencies do not call to demand payment for warrants or threaten arrest over the phone.

How to Block Scam Calls

How to Report Phone Scams

Reporting phone scams is essential for enforcement and helps regulators identify patterns. Every report contributes to the data that the FTC and FCC use to take action against scam operations and update carrier blocking databases.

• FTC: ReportFraud.ftc.gov or call 1-877-FTC-HELP (1-877-382-4357). The FTC is the primary federal agency for consumer fraud complaints
• FCC: fcc.gov/consumers/guides/stop-unwanted-robocalls-and-texts for robocall and spoofing violations
• FBI IC3: ic3.gov for phone scams involving financial loss, especially business email compromise
• State Attorney General: Your state's consumer protection division handles state-level enforcement
• IRS impersonation: Report to TIGTA at treasury.gov/tigta
• Social Security impersonation: oig.ssa.gov for SSA impersonation complaints
• Your carrier: Forward scam texts to 7726 (SPAM) for carrier-level investigation
• Do Not Call violations: donotcall.gov/report for calls from legitimate companies violating the registry

Advanced Protection Strategies

Beyond basic call blocking, several advanced strategies provide additional layers of protection against phone scams in 2026.

• Use a secondary phone number: Google Voice provides a free secondary number that can be used for online forms, shopping, and other situations where your number might be sold to data brokers. Keep your primary number for trusted contacts only
• Monitor your number in breach databases: Use haveibeenpwned.com to check if your phone number has appeared in data breaches. If it has, expect increased scam call volume
• Freeze your credit: Prevent identity theft that often begins with phone scams by placing a free credit freeze at all three bureaus: Equifax, Experian, and TransUnion
• Use app-based 2FA: Use authentication apps like Google Authenticator or Authy instead of SMS-based two-factor authentication, which is vulnerable to SIM-swapping attacks
• Educate vulnerable family members: Older adults are the most financially impacted by phone scams. Help them set up call blocking, establish a family code word, and understand that no government agency will call demanding payment by gift card
• Remove your number from data broker sites: Services like DeleteMe or Privacy Duck can remove your phone number from data broker databases that scammers purchase to target victims

FAQ: Phone Scams

How do I block robocalls on my phone?

On iPhone, enable Silence Unknown Callers in Settings > Phone. On Android, enable Call Screen or block unknown callers in the Phone app settings. Install a call-blocking app like Nomorobo, Hiya, or Truecaller. Register your number at donotcall.gov. Contact your carrier about their free call-blocking services.

How do I report a phone scam?

Report to the FTC at ReportFraud.ftc.gov or call 1-877-382-4357. Report to the FCC at fcc.gov. File a complaint with your state attorney general. If the scam impersonated a government agency, report it directly to that agency.

Can scammers clone my voice with AI?

Yes. AI voice cloning technology in 2026 can create a convincing replica of someone's voice from as little as 3 seconds of audio. Scammers use cloned voices for family emergency scams and business email compromise. Establish a family code word for emergency verification.

What is the STIR/SHAKEN protocol?

STIR/SHAKEN is a framework implemented by U.S. carriers to authenticate caller ID and reduce spoofing. It verifies that the calling number has not been illegally spoofed. Calls that pass verification display a checkmark or verified label on supported devices.

Should I answer calls from unknown numbers?

As a general rule, do not answer calls from unknown numbers. Legitimate callers leave voicemails. Answering confirms your number is active, which can lead to more scam calls. Use a call screening app if you must answer unknown calls for business reasons.

Disclaimer: This article is for educational purposes only. Report phone scams to the FTC and FCC. If you lost money, contact your bank immediately and file a report with the FBI IC3.