How Scammers Get Your Phone Number, Email and Personal Details

You never gave this company your number, yet they’re texting you by name. A stranger on the phone knows your address and the last four digits of your card. It feels like someone has been watching you. Usually, the truth is less personal: your details have been collected, copied and sold many times over, often without you knowing.

This article explains where scammers get personal information, why it makes scams more convincing, and what you can realistically do to shrink your footprint. It was checked against Federal Trade Commission (FTC) guidance on November 7, 2026.

Where scammers get your details

Data breaches

When a company is hacked, customer records such as names, emails, phone numbers, passwords, birthdates and sometimes Social Security numbers can end up for sale on criminal forums. One breach can expose millions of people at once, and the data keeps circulating for years. Our article What Happens to Your Data After a Breach explains where it goes.

Data brokers and people search sites

Data brokers are companies that collect information about people from public records, purchases, apps, loyalty programs and other sources, then sell or share it. The FTC’s landmark study of the industry found that brokers collect vast amounts of information, typically behind the scenes, and often share it with one another. People search sites put much of this online, where anyone can look up a name and see addresses, relatives, phone numbers and age, sometimes for free.

Public records

Property records, court filings, business registrations, voter files (in some states) and professional licenses are public by design. They’re useful for transparency, but they also give scammers addresses, home values and names of relatives.

What we share ourselves

Social media posts can reveal a lot: your hometown, pet’s name, children’s school, birthday, travel plans and who your grandchildren are. “Fun” quizzes asking for your first car or mother’s maiden name collect the answers to common security questions. Scammers behind family emergency scams often build their story from public posts.

Guessing and automated dialing

Not every scam is targeted. Robocall and robotext systems simply dial or text number after number. A reply, even “STOP” to a scam text, or answering and pressing a key, can confirm your number is active and get it passed to more scammers.

Phishing and fake forms

Fake prize entries, surveys, job applications, rental listings and “verify your account” pages exist mainly to collect personal information that can be used now or sold later.

Apps and trackers

Some apps and websites share location and usage data with advertising partners and brokers. That’s not usually how scammers get you directly, but it feeds the same data market. See how to check app permissions.

Why it matters: real details make fake stories believable

A scam call that opens with your full name, address and the name of your bank sounds official. Scammers count on the idea that “only the real company would know this.” In reality, that information may have come from a breach or a broker. The FTC warns that scammers often know some personal details, and that knowing them proves nothing.

The rule to remember: someone knowing your information is not proof of who they are. Hang up and contact the organization yourself using a number you find independently.

How to shrink your footprint

You can’t erase yourself from the internet, but you can make your details harder to find and less useful.

1. Opt out of people search sites. The FTC explains that you can search for yourself on each site and use its opt-out page for free, or pay a service to do it for you. Information can reappear, so check back now and then. We compare the paid options in Data Broker Removal Services Reviewed.
2. Use email aliases for shopping and sign-ups, so a breach doesn’t expose your main address. See our email alias review.
3. Tighten social media privacy. Limit posts to friends, hide your birth year and friends list, and skip quizzes that ask security-question style questions.
4. Don’t engage with scam texts and calls. Don’t reply or press keys; report and delete them. See how to stop unwanted calls on your mobile.
5. Register with the National Do Not Call Registry at DoNotCall.gov. It won’t stop scammers, who ignore the law, but it cuts calls from legitimate telemarketers, so the ones you do get are more likely to be scams.
6. Freeze your credit. It’s free and stops new accounts being opened with stolen details. See our credit freeze guide.
7. Review app permissions on your phone and turn off location access for apps that don’t need it.

For families and older adults

• Older adults are often listed on people search sites with relatives’ names, which helps “grandparent” scammers. Opting out a parent’s listings is a kind and practical gift.
• Talk with kids and teens about what they share publicly: school names, locations and family details are all useful to strangers. See Teen Privacy and Location Sharing.

FAQ

How did a scammer get my name and number together?

Most likely from a data breach, a data broker, or a list sold between marketers. It doesn’t mean your phone was hacked.

Can I find out if my information was in a breach?

Yes. Many password managers and browsers check your saved passwords against known breaches, and free services such as Have I Been Pwned let you look up your email address.

Will opting out of data brokers stop scam calls?

It can reduce how easy you are to find, but it won’t stop calls entirely, since many robocalls dial numbers at random. Call blocking tools on your phone help with the rest.

Related reading

• Why Smart People Fall for Scams
• Imposter Scams
• Phishing Text Messages: Examples and Red Flags
• The Privacy Toolkit

Sources

• Federal Trade Commission, “What To Know About People Search Sites That Sell Your Information,” consumer.ftc.gov, accessed November 7, 2026.
• Federal Trade Commission, “Data Brokers: A Call for Transparency and Accountability,” May 2014, ftc.gov.
• Federal Trade Commission, “How To Avoid a Scam,” consumer.ftc.gov, accessed November 7, 2026.
• National Do Not Call Registry, donotcall.gov, accessed November 7, 2026.

This is general information, not legal advice.