Scoring Methodology
A comprehensive look at the parameters, threat weights, and classification rules behind our phone risk evaluation.
WhoCalledCheck relies on standard telephone signaling parameters rather than personal background checks to compute caller risk indicators. Our scoring system runs searches on an "as-is" basis, evaluating incoming numbers from 0 (Low Risk) to 100 (Critical Threat) using public telecom rules and prefix allocations.
A high risk score is not proof that a caller committed fraud. It means the phone number shows technical or behavioral indicators that are more commonly associated with unwanted, masked, suspicious, or higher-risk calling patterns. Users should treat the score as a caution signal and verify important claims through official channels.
Key Scoring Signals
Format Validity Check
Checks E.164 compliance to verify if the number conforms to standard dialing lengths, dialing codes, and assignment plans.
VoIP Carrier Check
Identifies if the number is assigned to a virtual network provider. Because VoIP numbers are easily spoofed, they increase risk.
Prefix Risk Alerts
Verifies prefix blocks against international registries to identify high-tariff dial codes used in call-back billing scams.
Evaluating the Risk Scale
Mathematical scoring parameters
1. What the Risk Score Means
The WhoCalledCheck phone risk score estimates the probability that a phone number is associated with robocalling, caller ID spoofing, neighbor-spoofing, phishing, or premium-rate callback traps. It uses numeric weights associated with routing paths (such as virtual VoIP channels) and formatting compliance rules. A higher risk score represents technical signals that warrant caution before answering or returning a call.
2. What the Risk Score Does Not Mean
A risk score is not legal proof of fraud or a confirmation of caller identity. Our scoring system is built strictly on standard telecom range telemetry and numbering plans. A high risk score does not mean the number owner is a criminal, nor does a low score guarantee that a caller is safe. It represents an estimate of connection caution.
3. Risk Score vs Confidence
WhoCalledCheck separates risk level from confidence. A number may receive a higher risk score because its format is invalid or its region cannot be confidently identified, but the confidence level may remain limited if there are not enough supporting signals. This helps prevent overclaiming when the available evidence is incomplete. This distinction is critical to prevent false positives for newly issued ranges.
4. How Number Format Validation Works
Format validation parses incoming phone digits against standard International Telecommunication Union (ITU-T) E.164 specifications. Our parser decomposes numbers into country codes, national destinations, and subscriber prefixes. Numbers failing format rules, missing routing digits, or containing dialing anomalies receive higher threat weights.
5. How Region and Country Indicators Work
Dialing country codes map numbers to specific regional telecom registries. Certain international codes are widely associated with high-tariff callback scams (such as one-ring scams). We cross-reference codes with premium billing prefixes to warn users about elevated callback fees.
6. How Line Type Signals are Interpreted
Line classification separates physical networks (mobile networks, copper landlines) from virtual networks (VoIP). Virtual numbers are cheap, can be configured anonymously, and support automated high-volume dialing, making them highly common in spam operations.
7. Why VoIP is Not Automatically a Scam
VoIP (Voice over Internet Protocol) routing is standard for modern businesses, customer service centers, and cloud communication apps (e.g., Zoom, Microsoft Teams). While a virtual configuration raises the technical risk index due to anonymity options, it is not a direct confirmation of fraud. Users should verify credentials through official channels rather than blocking VoIP connections blindly.
8. How Premium-Rate and Toll-Free Numbers are Handled
Premium-rate prefixes (e.g., 900 numbers in the US) automatically bill callers high rates when a connection is established. Scammers exploit these ranges via missed-call traps. Toll-free prefixes (e.g., 800, 888) represent standard business channels, but are frequently spoofed to look like legitimate banks. We evaluate the routing context to flag these discrepancies.
9. How AI-Generated Explanations are Constrained
AI-generated report explanations are based only on structured risk signals produced by the scoring system. The AI does not independently identify the caller, locate a device, access private records, or change the risk score. It acts as a parsing utility to translate structural formatting anomalies into clear safety checklist steps.
10. How Paid Reports Should Be Used
Paid reports provide detailed breakdowns of E.164 validity check logs, virtual line signals, and scoring explanations. They are intended for personal informational reference only. Users should use them to evaluate callback safety and decide whether to block callers or proceed with caution.
11. Limitations and Data Freshness
Telecom carrier routing maps and range allocations change frequently. Our engine references standard registries, but reports represent a snapshot in time. We advise verifying caller identity through alternative public records before sharing payment details or credentials.
Signal Mapping Parameters
| Signal Type | Technical Meaning | Risk Weight Impact | Limitation |
|---|---|---|---|
| Invalid Format | Number fails to comply with standard E.164 ITU parameters. | Elevated (Potential Spoofing) | Not proof of scam; could be dial format entry error. |
| VoIP Routing | Hosted on cloud virtual server networks. | Moderate Caution | Many legitimate companies use VoIP; not proof of threat. |
| Premium-Rate Prefix | Range is allocated to high-tariff callback networks. | High Callback Caution | Depends on national routing regulations. |
| Unknown Code Range | The country prefix cannot be resolved in registries. | Limited Confidence | Requires additional telemetry inputs to evaluate. |
Interpretative Limitations
Our score represents a technical and behavioral evaluation of a telephone connection block, not an individual. A high score indicates that the connection properties resemble known spam vectors, but it does not represent legal proof of fraud or reflect the character of any caller. We advise using these scores as a supplementary caution guide alongside your own due diligence.