Unwanted calls and texts: what you can do

Your phone rings three times a day. A voice offers you a car warranty, or a text says a package is waiting. You did not ask for any of it, and you wonder how they got your number. Here is what you can do, in order.

What the Do Not Call Registry does, and what it does not

The National Do Not Call Registry is run by the FTC. Registering is free at DoNotCall.gov, or by calling 1-888-382-1222 from the phone you want to register. Cell phones are handled the same way as home phones.

According to the FTC, your number should show up on the Registry the next day, but sales calls may continue for up to 31 days. Registration does not expire.

The limits matter. The FTC says the Registry is a list that tells registered telemarketers which numbers not to call. It does not block calls, and it will not stop scammers. Companies you recently did business with, or gave written permission to, can still call. The FCC says telemarketers must comply immediately with any do-not-call request you make during a call. Political, charitable, debt collection, informational and survey calls are also allowed, though they cannot include a sales pitch.

Registering is free and tells legitimate telemarketers not to call, but it is only one step.

If you have not answered or paid anything

1. Hang up. Do not press keys to "opt out" or to speak to someone. The FTC says that will probably only lead to more robocalls.
2. Do not trust caller ID. The FCC warns that scammers use caller ID spoofing to make a call look legitimate. A local number or a familiar name proves nothing.
3. Do not answer numbers you do not know. The FCC also suggests calling back an official number from an account statement or the company's website if someone claims to be your bank or a government agency.
4. Block the number. The FTC says call blocking can help reduce unwanted calls. Check what your phone carrier offers, and read reviews of call-blocking apps in your app store.
5. Register with the Do Not Call Registry if you have not already.
6. Report the call at DoNotCall.gov. The FTC asks for the number that received the call, the number on your caller ID, any number you were told to call back, and the date and time if you know them. Report even if the caller ID looks fake.

The FTC says it releases the phone numbers that people report each business day, to help phone carriers and industry partners with call-blocking and call-labeling.

You can also file a complaint with the FCC and choose the "unwanted calls" category. The FCC says it does not resolve individual complaints, but uses them to guide policy and possible enforcement. Many states also run their own do-not-call lists. The FCC suggests asking your state's public service commission or consumer protection office.

Spam texts

The FTC lists common lures: free prizes, gift cards or coupons, account or payment problems, fake invoices and package delivery notices. Some links lead to spoofed sites, and some messages install malware.

1. Do not click links or reply to texts from numbers you do not recognize, the FCC advises.
2. Check the claim another way. The FTC says legitimate companies will not ask for information about your account by text. If the message might be real, use a phone number or website you know is genuine, not the details in the text.
3. Forward the message to 7726 (SPAM). The FTC says this helps your wireless provider spot and block similar messages. The FCC says most mobile carriers support it, so check with yours.
4. Report it in your messaging app and at ReportFraud.ftc.gov.

The FCC adds that its rules on autodialed texts apply even if your number is not on the Do Not Call Registry.

If you paid, clicked or shared details

Act quickly, and do not be hard on yourself. These calls are built to sound urgent.

1. Stop all contact with the caller. Do not call back the number they gave you.
2. Call your bank or card company using the number on your card or statement, not one from the call. Tell them what happened. The FTC says an unsolicited caller who insists on payment by wire, gift card, payment app or cryptocurrency is a scam, so ask the bank what it can do.
3. Change passwords on any account you discussed, and on any other account that uses the same password. Turn on two-factor authentication where you can.
4. Report it at ReportFraud.ftc.gov. The FTC says to use it if you lost money or have information about the caller. If you think someone is using your identity, go to IdentityTheft.gov.
5. Never share account numbers, Social Security numbers, passwords or PINs over the phone, the FCC advises. Hang up if someone asks for money or personal information.

Why they have your number

Telemarketers and scammers can find numbers in several places. The FCC notes that scammers use technology and information they find online. It suggests being careful about giving out your phone number, reading the privacy policy before you submit your number on a website, and checking whether companies sell or share your information.

If a data breach exposed your phone number or email, scam calls and texts often follow. Our free scan checks public web results, known data breaches through Have I Been Pwned and LeakCheck, and a registry of people-search sites. It does not need an account. An empty result does not mean nothing is out there, because the scan only sees what is public.