Device spoofing is the practice of changing a device’s reported identity so it appears to be a different model, brand, or class of hardware. Attackers usually do this by rewriting system properties, user-agent strings, hardware identifiers, or app-reported signals that services use to profile clients.
It matters because many security and fraud controls rely on device identity to judge trust, eligibility, and risk. Spoofed identities can help malware blend in, evade reputation checks, bypass model-based restrictions, or make non-mobile hardware look like a legitimate phone. Defenders counter this with attestation, certificate-based trust, telemetry correlation, and anomaly detection that compares claimed identity with real device behavior. On compromised Android boxes and other IoT devices, spoofing is often paired with proxying or ad fraud so the device can masquerade as a consumer handset while sending traffic through a different network.