What Android’s New Caller Verification Feature Does
Android caller verification is a new phone number spoofing detection feature that checks whether an incoming call from a saved contact is really coming from that person’s device, warning you when a scammer is impersonating the contact’s number using spoofing tools. It builds on Android’s earlier scam call warnings and is part of Google’s June feature drop. Instead of relying only on caller ID, the system looks for a secure confirmation between the two phones. If that verification fails, the Phone by Google app flags the call as suspicious so you can hang up. This approach is designed to fight modern contact impersonation scams, where criminals copy trusted numbers and pair them with AI-cloned voices to pressure victims. The protection is automatic, requires no extra setup, and focuses on contact trust, not voice analysis.
How the Encrypted Digital Handshake Works
At the core of Android’s fake call detection is a silent “digital handshake” between devices. When someone in your contacts calls and both of you use Phone by Google, their phone sends a real-time verification signal to yours over end-to-end encrypted RCS. Google explains that this signal confirms the call is “legitimate and truly coming from the contact’s device,” meaning the system checks the device origin rather than the caller ID text. If your phone receives the signal, the call proceeds as normal. If it does not, the app knows something is wrong and can probe further. Because the process uses RCS caller verification, your conversation and metadata stay private; only the fact that a valid device initiated the call is shared. This makes the security check invisible to users while raising the bar for spoofing attacks.
Detecting Spoofed Contacts and Fake Calls in Real Time
When a scammer spoofs your friend’s or family member’s number, there is no matching device to complete the handshake. In that case, fake call detection tries a second step: your phone quietly pings the real contact’s device to ask whether it is placing a call. If the real device reports that it is idle, your screen shows a warning that someone may be pretending to call from that contact’s number. One example highlighted in coverage is the message: “This may not be Mom. Someone may be pretending to call from your contact’s number.” This makes contact impersonation scams easier to spot before any conversation begins. Instead of guessing whether a voice sounds off, you receive a clear signal that the device behind the number is unverified, helping you avoid sharing passwords, one-time codes, or payment details with imposters.
Why Device-Level Verification Matters Against Imposter Scams
Contact impersonation scams have grown more convincing as AI voice cloning and internet-based caller ID spoofing improve. A familiar name and number on your screen no longer prove a call is safe. Google’s new system tackles this by verifying the caller’s device, not their story or tone. As one report notes, this is “a more practical defence than trying to detect a cloned voice after the call has already started.” Device-origin checks give Android a strong technical signal before you decide whether to answer or speak. Because the process runs in the background through RCS caller verification, it does not add friction: there are no codes to exchange, and no special training required. The feature targets the exact moment scammers hope to exploit—when you see a trusted contact’s number and feel pressured to pick up.
Availability, Requirements, and What Users Need To Do
Fake call detection is rolling out as part of Android’s June update to devices running Android 12 and above that use the Phone by Google app. It is enabled by default, so most users will benefit without changing settings. Both the caller and the recipient must use Google’s Phone app for the encrypted verification to work, because the digital handshake relies on shared RCS support. Google is starting with its own Pixel line and extending globally, and coverage notes that the company hopes other dialer apps will adopt compatible RCS caller verification in time. For users, the guidance is simple: keep your Android device updated, use Phone by Google as your default dialer if you want the feature, and pay attention to warnings when an incoming call claims to be a contact but shows a spoofing alert.
