Caller-ID spoofing is the practice of falsifying the phone number displayed to a recipient so a call appears to come from a trusted source, such as an internal desk, a vendor, or a help desk line. The caller may be anywhere in the world, but the displayed number can be made to look local, familiar, or authoritative.
This matters in cyber security because many attacks rely on trust before any technical exploit begins. Spoofed caller ID can support vishing, account takeover, and help-desk fraud by making urgent requests seem legitimate. In real incidents, attackers use it to pressure employees into revealing credentials, approving MFA resets, or changing access settings. Defenders reduce the risk by treating phone requests as untrusted by default, requiring out-of-band verification, using call-back procedures to known numbers, and training staff to recognize that a trusted-looking number does not prove identity. Caller-ID spoofing does not break telephony security alone; it breaks human verification processes that depend on the screen, not on independent proof.