- Callers get your number from forms you filled in, data brokers, scraped or leaked databases, recycled numbers and dialers that try numbers at random.
- Quote forms are the fastest route. In a 2026 study of 105 insurance quote sites, half of all first calls came within 2 minutes of a form being submitted.
- Your own area code on caller ID proves nothing: 59% of the calls in that study came from numbers with the same area code as the person called.
- You cannot tell which site leaked your number until each site has a number of its own, and a named ExpressNumber number is that.
Where spam callers get your number
Why am I getting so many spam calls? Your number was sold, leaked or guessed.
Your number is on lists that companies buy and sell: quote forms you filled in, data brokers, leaked databases and recycled numbers, and some dialers just try numbers at random. ExpressNumber gives you a separate, named number for each site that asks, so the next spam call tells you who sold yours.
$0 todayEvery outside fact on this page was read on the organization's own page, linked at the foot.
These are the five ways a caller gets your number.
Each row is a route that a regulator or a researcher has documented. The last column says what the evidence is.
| Where it starts | How your number gets out | What the evidence says |
|---|---|---|
You type your number into a form that promises a quote. The form sells it on as a lead. | A 2026 study of 105 insurance quote sites found contact details reaching 73 third parties. The FTC describes a lead generator that sold mortgage quote leads to illegal robocallers. | |
They buy data from other brokers, copy public profiles and compile public records into reports they sell to anyone who pays. | The FTC says you can opt out of your phone number and address, but opting out does not remove public records. | |
Scrapers feed batches of possible numbers into a lookup tool and match each one to a name and profile. | Ireland's data regulator fined one social network 265 million euros in 2022 over a scraped dataset reported to cover about 533 million users. | |
A number someone drops is given to a new owner, and callers still dial it for the old one. | The FCC counted about 35 million disconnected numbers made available for reassignment each year. | |
Some robocalls never knew your name. A dialer reached a number that exists. | The FTC says it plainly: sometimes robocalls are random. |
A quote form can pass your number to dozens of companies within minutes.
A form that promises you a quote is often a lead generator, and your contact details are the product. In a 2026 study, researchers filled in 105 health insurance quote sites with test details, and the names, numbers and emails reached 73 third parties across those sites.
The calls came fast. Half of all first calls arrived within 2 minutes of a form being submitted, and the test phone numbers and email addresses received 8,214 calls from 1,240 different numbers, plus 674 texts and 166 emails. Some profiles had several callers ring at once, and the authors say the dialing at times made a phone unusable.
The researchers then registered as a buyer on a lead marketplace and bought their own test lead in real time for $4, while the form was still being filled in. None of the three marketplaces they tried asked for real proof of who they were.
The FTC describes the same pattern outside a lab. People who asked for mortgage refinance quotes gave a lead generator their name and number, and the company sold that information to telemarketers making illegal robocalls, the agency wrote in January 2024.
What the 2026 study measured
One quote form, then the calls.
A name, number and email go into a formOne of 105 insurance quote sites, each given its own test profile.
Resold
The lead is on sale for $4The researchers bought their own, in real time, as the form was being filled in.
Dialed
Half of first calls come inside 2 minutes73 third parties received contact details across the sites.
8,214 calls from 1,240 different numbers, plus 674 texts and 166 emails.
The FTC advises searching a site's name plus "complaint" or "scam" before you enter your details, and reading the small print. A line of small print can mean that ticking a box agrees to have your information collected and sold to other companies.
Sources: Vekaria, Demir, Kollnig and Shafiq: Understanding Data Collection, Brokerage, and Spam in the Lead Marketing Ecosystem (2026) · FTC: How are robocallers getting your phone number?
Many spam calls show your own area code on purpose.
Callers copy local numbers so you will pick up. In the lead study, 59% of the calls to the test lines came from numbers with the same area code as the person called, and the FTC warns that scammers can fake the name and number on your caller ID.
That makes caller ID a weak clue, and it is why blocking one number rarely lasts. The FCC's complaint file shows the other side. People filed 125,367 unwanted-call complaints between October 2025 to September 2026, and of the caller ID numbers they reported, 82% had a local area code and 18% a toll-free one. The code named most often was 303 (Denver and Boulder), with 2,219 complaints.
The volume behind those complaints is large. The YouMail Robocall Index counted 4.35 billion robocalls placed to US phones in July 2026 alone. See every code and month on spam calls by area code, or your own state on spam calls by state.
FCC unwanted-call complaints
Most reported caller IDs look local: 82% had a local area code.
- Local codes, tied to a place82% · 44,196 complaints
- Toll-free codes18% · 9,731 complaints
- Special-use or unassigned0.3% · 147 complaints
The six local codes people named most
125,367 complaints, October 2025 to September 2026. FCC open data, read November 4, 2026.
Sources: Vekaria, Demir, Kollnig and Shafiq: Understanding Data Collection, Brokerage, and Spam in the Lead Marketing Ecosystem (2026) · FTC: Robocalls · FCC open data: CGB Consumer Complaints Data · YouMail Robocall Index
Brokers, breaches, recycled numbers and random dialing do the rest.
Not every spam call traces back to a form you filled in. Data brokers sell profiles, scrapers match numbers to names, the phone system hands your old number to a stranger, and some dialers just try numbers that exist.
Data brokers sell your details
People search sites buy data from other brokers, copy public profiles and compile public records into reports they sell to anyone who pays. They let you opt out of your phone number and address, but opting out does not touch public records.
FTC: What to know about people search sites that sell your information
Scrapers match numbers to names
Scrapers fed batches of possible phone numbers from more than 100 countries into a contact import tool to get names and public profile data. Ireland's regulator fined the company 265 million euros in 2022 over the dataset, which was reported to cover about 533 million users.
Irish Data Protection Commission: decision on the Facebook data scraping inquiry (November 2022)
Old numbers keep their callers
About 35 million numbers are disconnected and made available for reassignment each year, the FCC estimated in 2018. A caller looking for the previous owner keeps dialing, and the new owner gets the calls.
FCC order creating the Reassigned Numbers Database (FCC 18-177)
Some calls are simply random
The FTC says sometimes robocalls are random. A dialer that works through number ranges reaches a live phone without knowing anything about its owner.
You can find out who leaked your number by giving each site a different one.
The only way to know which site sold your number is to give every site a number of its own, so the spam that follows carries a label. ExpressNumber does this with named numbers that forward calls to your own mobile, so the number a dealer, a marketplace or a quote form gets is never the one your family calls.
- 1Make a number for the place that wants yours and name it after that place, such as Car dealer, Insurance quote or Marketplace ad.
- 2Give that number, and only that number, to that place. Calls to it ring the US or Canada mobile you confirmed, and texts land in your web inbox under the same name.
- 3When spam arrives, look at the name it came to. A call you never expected on the number named Insurance quote tells you who sold it.
- 4Burn the number in one tap. Burning is permanent, so that caller is cut off for good, and your real number never changed.
- 5Paste any number that called you into the spam number lookup to see its line type and risk level before you decide what to do.
9:41
Your numbers
Car dealer
(415) 555-0142
Forwarding
Insurance quote
(212) 555-0166
Burned
Marketplace ad
(305) 555-0118
Forwarding
Use it for the places that only need to reach you: listings, sellers, dealers, quotes, dating and deliveries. Keep your real number for your bank and for the people who call you every day, because some banks and services refuse virtual numbers.
Basic is $9.99 a month with 5 numbers, and the first 7 days are free. How a second number works and what a disposable number is explain the rest.
If the calls are already coming, the next guide shows how to stop them.
Filters and blocking hide the calls you already get, and a separate number stops the new ones. How to stop spam calls lists the fixes in order, with the iPhone and Android steps and what each one misses, and how to stop spam texts does the same for messages.
These are the questions people ask first.
A sudden rise usually has one of three causes: you filled in a form that sells leads, your number was matched to your name in a scraped or leaked database, or you were given a recycled number whose old callers still dial it. Ask what changed in the last few days, such as a quote form, a contest entry or a new number. The FCC estimated in 2018 that about 35 million numbers are made available for reassignment each year.
Callers copy local numbers because people answer them. In the 2026 lead study, 59% of the calls used the same area code as the person called, and the FTC warns that scammers can fake the name and number on caller ID.
No. A caller needs only your number, and every source on this page works from the number alone: a form, a broker report, a leaked list, a reassigned line or a dialer that tries numbers that exist. Your phone does not have to be touched.
Pressing a number to speak to someone or to be removed from the list will probably lead to more robocalls, the FTC says. Hang up, do not call back, and report the call at DoNotCall.gov.
A sales robocall is illegal unless the company got your written permission, directly from you, the FTC says. A company also cannot make you agree to the calls in order to get a product or service.
Give each site its own number. With ExpressNumber you name a number after the place that gets it, calls forward to your own mobile and texts land in your web inbox under that name. When spam arrives on the number named Insurance quote, that is where it leaked. Burning the number takes one tap and is permanent.
Only for a while, if you keep giving the new number to every form. A new number can also arrive with a previous owner's callers. The lasting change is to give each site a separate number and keep your real one off forms.
There are more pages on the same problem.
Every outside fact on this page comes from these sources.
Read November 4, 2026. The complaint counts are the FCC's open data, as read on the date printed beside them.
- Vekaria, Demir, Kollnig and Shafiq: Understanding Data Collection, Brokerage, and Spam in the Lead Marketing Ecosystem (2026)
- FTC: How are robocallers getting your phone number?
- FTC: What to know about people search sites that sell your information
- FTC: Robocalls
- Irish Data Protection Commission: decision on the Facebook data scraping inquiry (November 2022)
- FCC order creating the Reassigned Numbers Database (FCC 18-177)
- FCC open data: CGB Consumer Complaints Data
- YouMail Robocall Index
The next form can get a number you can burn.
Hand out a number you can burn. Keep the one your family calls.
Try it free for 7 days