SardineCon SF/2026

Learn More
Scams & social engineering4分 で読めます

Robocallとは?

ニュースレターを購読

A robocall is a prerecorded, automated phone call, dialed in bulk by software rather than a person. Legitimate uses exist, but robocalls are the delivery system for a huge share of phone scams, which is why telemarketing law restricts them tightly.

What is a robocall?

A robocall is a phone call placed by an automated dialer that plays a recording instead of connecting a live agent. The technology lets one operator dial millions of numbers cheaply, which is why it is used for everything from appointment reminders to political messages to outright fraud.

The lawful versions usually need the recipient's prior consent or fall into narrow exceptions. The illegal versions ignore all of that: they spoof caller ID to look local or official, blast numbers on and off the Do Not Call list, and open with a hook designed to make someone stay on the line and press a button.

For fraud teams, the robocall itself is the top of the funnel. It is the cheap, scaled first contact that filters for people who will engage, then hands them to a live scammer or a scripted flow that pushes them toward a payment, a passcode, or personal data.

How a scam robocall plays out

A fraudulent robocall campaign is a filter: dial everyone, keep the few who react, and escalate them.

  1. BlastAuto-dial at scale Software dials millions of numbers with a spoofed local or official caller ID to raise the pickup rate.
  2. HookPlay the recording A prerecorded message manufactures urgency: a fake fraud alert, an overdue bill, a legal threat, or a prize.
  3. FilterRoute the responders Anyone who presses a key or calls back is a warm lead and is connected to a live scammer or a scripted menu.
  4. ExtractPush to payment or data The agent pressures the victim into a transfer, gift cards, crypto, a one-time passcode, or account details.

What it looks like in practice

A customer gets an automated call that appears to come from a local number. The recording says their bank account shows suspicious activity and to press one to speak with the fraud department. Worried, they press one and reach a calm agent who already seems to know a few details about them.

The agent says the account is compromised and the safe move is to transfer the balance to a protected account they will set up. The customer authorizes the transfer themselves. From the bank's side it looks like a legitimate, customer-initiated payment, which is exactly why the robocall front end is so effective: it turns a stranger's call into an authorized push payment the victim makes willingly.

Why robocalls matter to operators

Robocalls are the mass-market front end for scams that end up as losses on your books. The call itself happens off your platform, but the result lands on it: an authorized transfer to a mule account, a rushed gift-card purchase, a passcode read aloud that unlocks a login. Understanding that a victim was primed by a robocall helps you read the transaction that follows.

They also shape expectations for your own outbound contact. Because scam robocalls have trained people to distrust unexpected calls, legitimate fraud-alert calls and voice verification are less effective than they used to be. That pushes teams toward channels and signals that a scammer cannot easily spoof, and toward friction on the payment side, since the persuasion happened before the customer ever touched your app.

What to watch in the data

  • Call then transfer. A payment or transfer made shortly after an inbound call, especially to a new payee, fits the robocall-to-scam pattern.
  • New safe account payees. Transfers to a just-added account the customer calls safe or protected are a hallmark of impersonation robocalls.
  • Passcode reads. A successful login or step-up right after a customer was on a call can mean a one-time code was read to a scammer.
  • Urgency in support contacts. Customers repeating a script about fraud departments or legal threats were likely primed by a recorded call.
  • Clustered targeting. Several customers reporting similar calls in a short window suggests an active campaign hitting your base.

Quick questions

Are all robocalls illegal?

No. Some are lawful, such as appointment reminders or calls made with prior consent, and certain informational or political calls fall under exceptions. The illegal ones are the unsolicited marketing and scam calls that ignore consent rules and the Do Not Call list.

How do scammers make the number look local?

Through caller ID spoofing, which lets them display any number they choose, often one matching the victim's area code or a real institution. The displayed number is not proof of who is actually calling.

Why press one? What does that do?

Pressing a key confirms a live person who will engage, turning you into a warm lead. It routes you to a scammer and often marks your number as responsive, which can bring more calls rather than fewer.

How does a robocall become a payment loss?

The call primes the victim with fear or urgency, then a live agent walks them into moving money themselves, buying gift cards, sending crypto, or revealing a passcode. Because the victim acts, the resulting payment often looks authorized to the bank.

Can we just block scam robocalls?

Carriers and call-authentication frameworks reduce them, but spoofing and cheap dialing keep the volume high. From an operator's side, the more reliable defense is watching for the payment behavior that follows a call and adding friction there.

Robocallと併せて知っておきたい用語

レポート

2026年 不正・AMLレポート

予測は不要です。このレポートは、不正・AMLチームが実際に直面していることと、その対応方法を分解して解説します。

レポートをダウンロード