Spoofing is falsifying an identifier or signal so a person or system mistakes where it came from—or trusts it incorrectly. The term covers several different techniques, including forged email identities, manipulated caller ID, fake websites, misleading network addresses, and false satellite-navigation signals. The details depend on the layer involved.
What spoofing means
In ordinary terms, spoofing makes something appear to come from a source it did not. The false appearance might be a sender name, phone number, web address, network packet source, or navigation signal. The common thread is misleading identification; the mechanisms and consequences vary.
As an Amazon Associate I earn from qualifying purchases.
That is why it helps to say what kind of spoofing you mean. Email spoofing and caller ID spoofing target familiar forms of communication, while IP and DNS spoofing operate within network systems. GNSS spoofing concerns signals used to calculate position or time. NIST’s glossary entry, sourced to NIST IR 8323r1, is specifically about manipulation of legitimate GNSS signals to corrupt positioning, navigation, and timing information or signal measurement integrity—not a universal definition for every use of “spoofing.”
Common forms of spoofing
| Type | What is made to look genuine | What the target may be led to do or believe |
|---|---|---|
| A message’s apparent sender or header information | Trust the message as if it came from a known person or organization | |
| Caller ID | The displayed phone number or caller identity | Answer a call that appears familiar or local |
| Text message | The identity associated with the sender | Trust a message that may include a deceptive link |
| Website or URL | A site or address resembling a legitimate one | Visit a fake site, disclose information, or download malware |
| IP | The source address on a network packet | Accept a packet as though it came from another computing system |
| DNS | The result that associates a domain name with a server | Reach a fake destination instead of the legitimate server |
| GNSS | Satellite-navigation signals used to calculate position or time | Accept manipulated positioning, navigation, or timing information |
Email, texts, and calls
An email can be crafted to look as if it came from a trusted person or organization. Forged header fields may include From, Reply-To, and Return-Path, as described by TechTarget. A display name by itself does not prove who sent a message; check the full sender address and the actual domain in any link.
#1 Best Overall
Caller ID spoofing manipulates the identity or number displayed for a call, making an unexpected caller seem familiar. Text-message spoofing similarly presents a sender identity associated with a legitimate source, such as a service or financial institution; the message may contain a malicious link. Cisco describes these and other examples in its overview of spoofing.
Websites and network systems
A spoofed website imitates a legitimate site, often to collect personal information or deliver malware. Look at the actual domain, not just the logo, page design, or name shown on the screen. A fake copy is also different from the genuine site being compromised: Malwarebytes distinguishes an imitation site from a real website that has been intruded upon.
At the network layer, IP spoofing means giving a packet a misleading source address, so it appears to come from another computing system. DNS spoofing, including cache poisoning, can divert a request for a legitimate domain toward a fake server. These uses of spoofing concern how systems identify or route traffic rather than what a person sees in an email or caller ID.
Satellite-navigation signals
GNSS spoofing involves false or manipulated signals intended to affect a receiver’s calculated position, navigation, or time and frequency. NIST’s glossary describes this specific technical context; its definition should not be stretched to imply that email, phone, or website spoofing works the same way.
Rank #3
Spoofing is not the same as phishing
Spoofing describes a false or manipulated presentation of identity or source. Phishing describes a deceptive attempt to get someone to reveal information or take an action. A phishing message may spoof a trusted sender or website to make its request seem credible, but spoofing can also occur without a phishing attempt. TechTarget notes that spoofing is used in phishing, spam, and business email compromise.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How to respond to a suspicious message, call, or site
- Do not treat a familiar display name, logo, sender field, or caller ID as proof of identity.
- For email, inspect the full sender address and the real domain behind a link before opening it.
- Be cautious when a message or caller urgently asks for money, credentials, or other sensitive information.
- Verify an unusual request using a contact method you already know is genuine, rather than replying or calling the number in the suspicious message.
For organizations, Cisco recommends layered email defenses that can include phishing protection, DMARC, malware protection, and user training. These are organizational controls, not a checklist of products every individual needs. A Swiss National Cyber Security Centre report from 2020 also discusses bogus senders and SPF, DKIM, and DMARC in its Swiss context; those mechanisms relate to email authentication and should not be mistaken for a guarantee that every message is safe.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
