Spoofing is the act of falsifying identity in communications to deceive recipients. In telephony, common forms include caller ID spoofing to display bank or police numbers, ore-ore scams mimicking family members' voices, and Business Email Compromise (BEC) where criminals pose as company representatives to redirect payments.
Spoofing succeeds by exploiting psychological vulnerabilities: obedience to authority and impaired judgment under urgency. When someone claims to be a police officer or banker, most people comply without question. Adding urgency like "your account will be frozen immediately" eliminates the pause needed for verification.
Technical spoofing methods are increasingly sophisticated. Voice cloning can now generate convincing synthetic speech from just seconds of audio samples. Caller ID spoofing exploits VoIP technology to display arbitrary numbers. Smishing attacks can display legitimate company names as SMS senders.
The core defense against spoofing is never trusting sender information at face value. Displayed phone numbers, email sender names, and SMS source names can all be faked. For important communications, always call back using a number you already know. See government impersonation scams and AI voice clone scams for current tactics.