1. Stop engaging
Do not return calls. Scammers want to find easy targets. Don't become that easy target. It's not worth spending your time with them. Engagement confirms the number is active and increases such calls. When in doubt, don't call the number back, but call the official number of your bank/postal office, etc. If you're finding these customer service numbers online, be careful that the number you copy is from the official site.
2. Block and filter aggressively
Enable call screening / silence unknown callers on the mobile phone. Go to your call history and press i icon on the far right in Iphone, and person icon on the top level in Android and Block & report spam. Scammers change numbers, so you'll have to continue doing this for a while, but eventually your phone will become much more peaceful.
3. Register & re-register
Add your phone number to the National Do Not Call Registry (even if already registered). Re-register yearly—it helps enforcement patterns. Register here: https://www.donotcall.gov/. This doesn't work all the time but doesn't hurt at all. Takes only a few minutes to register.
4. Report (even without losses)
File a report with the FTC (do not wait for money loss). Also report to the Washington State Attorney General (they track local clusters like 206/425/360). AARP is another great organization that is tracking scam reports. Help others be careful against the scam that you have witnessed.
5. Talk to the phone carrier
Ask about network-level scam blocking (many carriers offer it free). Carrier analyze calling patterns (high-volume dialing, spoofed numbers, known scam sources) and automatically block or label suspicious calls. Because it happens upstream, it is more efficient than phone-level apps. Most carrier offer this for free. Request a number change only if calls continue after filtering. Changing numbers is disruptive. You should also be careful to switch the numbers in accounts where you have used the phone number for 2 factor verification to get One Time Password.
6. Assume list exposure
These calls usually mean the number is on a resale list. Expect waves for weeks, then it typically drops if there’s no engagement. You can find if your contact details are exposed using https://haveibeenpwned.com/ and identity monitoring services offered by Experian, your bank, etc. You will most likely see your email address and phone number exposed there. No need for fear. Keep changing your passwords every 6 months, use password managers, and you'll be fine.
If you ever need help with scam protection, we offer consultancy services for free. Don't hesitate to reach out at contact@confidentive.com. You will find value in our conversations.