Scam Trends

Why Googling a Customer Service Number Can Connect You to a Scammer

iphone and android phones showing 'scam likely' and 'suspected scam' warnings on phonecalls

You need help with your account. You Google the company's customer service number. You find one, you call it, and someone answers who sounds professional, knowledgeable, and ready to help. Except they are not from the company. They are a scammer. And you just handed them the opening they needed.

This happens to millions of people every year. The attack is not on the phone number itself - it is on the journey between searching for the number and dialing it. Scammers have built an entire infrastructure to intercept that journey.

How Scammers Hijack Customer Service Searches

When you have a problem with your bank, your payment app, your airline, or your internet provider, your first instinct is to search for a number to call. Scammers know this. They target the exact queries people type when they need help: "Cash App customer service number," "Chase support phone number," "Delta Airlines customer service." These are high-volume searches with high-value targets on the other end.

The attack surface is not the phone system. It is the search result page.

Five Ways Scammers Intercept Your Call

Fake Websites With Deceptive Click-to-Call Buttons

Scammers create websites that display a real customer service number on the page to look legitimate. But the clickable "Call Now" button actually dials a different number the scammer controls. If you tap the button on your phone instead of manually dialing the number you see on screen, you reach a scammer without realizing it. Mobile users are especially vulnerable because they are more likely to tap rather than dial.

Fake Google Business Listings

Scammers create fraudulent Google Business profiles for "Cash App Support" or "Chase Customer Service" with their own phone number. These listings can appear in the Google Maps pack or knowledge panel when someone searches, giving them a veneer of legitimacy that most people will not question. Google removes millions of fake listings annually, but new ones appear constantly.

SEO Content Farms

Scammers publish articles on medium-authority domains with titles like "How to Contact Cash App Support (2026 Updated Number)" that rank for support-related queries. The articles look like helpful guides but include a fake number, or include the real number alongside a "direct support line" or "priority support number" that routes to the scammer.

Hijacked Legitimate Websites

In 2025, security researchers at Malwarebytes documented scammers injecting fake customer service phone numbers into the real websites of companies including Bank of America, Netflix, and Microsoft. Users trusted the domain and called the number without question. When the number appears on a website you recognize, there is almost no reason to doubt it.

Callback Scams After Real Support Attempts

You call the real customer service number. You get put on hold or disconnected. Within minutes, you receive a callback from a number that appears to be the company. The caller sounds professional and references the exact issue you were trying to resolve. But the callback is from a scammer who was monitoring for people trying to reach support. If you are ever disconnected, hang up and redial the number yourself. Do not answer callbacks.

Which Companies Are Most Targeted?

The companies most frequently impersonated in fake support number scams are the ones with the highest search volume for customer service queries and the highest-value accounts: Cash App, Chase, Bank of America, Wells Fargo, major airlines, Microsoft, Apple, Norton, Amazon, and PayPal. The FTC reported tech support scams as a top fraud category, with losses exceeding $159 million for adults over 60 in 2024 alone.

How Scammers Use Your Own Phone to Build Credibility

The "Verify This Charge" Trick

Once the scammer has you on the phone, they may tell you to open your phone settings to "verify" a suspicious charge. On iPhone, they direct you to Settings, then Apple ID, then Subscriptions or Purchase History. On Android, they send you to Google Play Store, then Payments and Subscriptions.

You navigate there and see real charges - app subscriptions, iCloud storage, streaming services. The scammer asks, "Do you see a charge for $9.99?" Since most people have some subscription around common price points, the answer is often yes. The scammer says, "That is the fraudulent one. We need to help you secure your account."

The scammer never placed the charge. They guided you to find a real, legitimate charge that already existed on your device and reframed it as fraudulent. In more sophisticated versions, the scammer already knows what services you use (from data breaches) and can name the exact charge and amount.

This is devastatingly effective because you verified it yourself on your own device. It feels like proof that the scammer has inside knowledge of your account.

The Advanced Version: Planting a Fake Charge on Your Screen

In the most sophisticated attacks, the charge the scammer references does not actually exist on your bank statement. The scammer has already gained remote access to your device earlier in the call by asking you to install an app like AnyDesk, TeamViewer, or QuickSupport.

With remote access, the scammer can modify what appears on your screen in real time. They can edit the HTML of your bank's website to insert a fake transaction line showing the exact unusual amount they mentioned on the phone. To you, it looks like a real charge appearing in your real bank account viewed through your real browser. But the charge was injected into the visual display only - it never existed in the bank's actual records.

Alternatively, the scammer may navigate your device to a fake page designed to look exactly like your bank's transaction history, with the fabricated charge pre-loaded. This is the same technique used in "overpayment refund" scams where scammers modify the bank page to show a fake deposit.

The key question: Did you install any app or software during the call? If yes, that is almost certainly how the scammer controlled what you saw on screen. Even after deleting the app, the manipulation happened during the call and the damage may already be done.

Why This Scam Is So Effective

You initiated the call. That single fact overrides almost every other instinct. When a stranger calls you, your guard is up. When you call someone, your guard is down. The scammer sounds professional, uses the right terminology, and may reference real account details obtained from data breaches. The urgency of your original issue - a locked account, a missing payment, a billing error - discourages you from hanging up to verify independently. And the "verify a charge" trick makes you believe the scammer has inside knowledge of your account when they do not.

How to Safely Find and Call a Real Customer Service Number

Go directly to the company's official website by typing the URL into your browser. Do not click search results. For banks, use the number printed on the back of your debit or credit card. Use the official app's built-in support feature whenever possible. Never tap a "Call" button on a third-party website you found through a search engine. If you are disconnected during a support call and receive a callback, hang up and redial the number yourself. Before calling any unfamiliar number, check it on Scamwise for a free instant assessment.

What to Do If You Called a Fake Number

If you did not share any information: Block the number and report it. No further action needed.

If you shared login credentials: Change your passwords immediately for the affected account and any other account where you use the same password. Enable two-factor authentication.

If you gave remote access to your device: Disconnect from the internet immediately. Uninstall any remote access software (AnyDesk, TeamViewer, QuickSupport). Run a malware scan. Change passwords for all accounts accessible from that device, especially banking and email.

If you sent money: Contact your bank or payment provider immediately to request a reversal. For wire transfers, the first 24-72 hours are critical. File reports with the FTC at ReportFraud.ftc.gov and the FBI's IC3 at ic3.gov.

Check Any Number With Scamwise

Before calling any customer service number you found online, paste it into Scamwise for a free, instant check. Scamwise analyzes the number against known scam patterns and tells you whether it is associated with fraud - before you dial.

About the Author

Patrick Coughlin

Patrick Coughlin is a cybersecurity and technology expert with over two decades of hands-on experience at the intersection of technology, intelligence, and security. He has built teams, products and companies to protect governments and Fortune 500 enterprises from the most sophisticated cyber threats. When his mother was targeted with an AI-powered impersonation scam, the threat became personal. Soon after, Patrick, along with his brother Ryan, founded Savi Security to help protect individuals and families from scams and fraud in the AI era. Patrick lives in Los Angeles with his wife, son and dog.

Protect your family with Savi

Stops scams before they reach you or your loved ones.
Join the waitlist to get Savi when we launch.

Join the waitlist

Less junk. Less noise. Less worry.