Phone lookup

Reverse phone lookup: how to find out who owns a phone number

Missed a call from a number you don't know, or got a text that feels off? Here's how to find out who's behind it: free checks first, what carriers and police can do, and how to avoid blaming the wrong person.

By Benicio Marcos Updated September 30, 2026 11 min read

What can a reverse phone lookup tell you?

A reverse phone lookup starts from a number and works back to the person or business behind it. It can show the line type and original carrier, messaging-app profiles linked to the number, web pages that mention it, and data breaches it appears in. It can't show where the phone is right now or read its calls and texts.

A good lookup can return:

Line type and carrier: mobile, landline or VoIP, and which company the number was assigned to.
Messaging-app presence: whether the number has a WhatsApp, Telegram or Signal account, sometimes with a name and photo.
Web mentions: business listings, classified ads, forum posts, resumes and spam-report pages that include the number.
Breach records: leaked databases where the number sits next to a name, an email address or a username.

What it can't return: live GPS location, call logs, or the contents of messages. Those stay with the carrier and are released only to law enforcement with legal process. A site that promises to "track" a phone from its number is selling something it doesn't have.

Why bother checking? Because phone calls cost scam victims more per case than any other contact method. In 2024 the FTC logged 284,659 fraud reports that began with a phone call, with $948 million lost and a median loss of $1,500, the highest of any method. Texts added 246,784 reports and $470 million (FTC Data Book 2024). The FBI counted more than 80,000 complaints about tech support and government impersonation call centers in 2025, with losses above $2.9 billion (FBI IC3).

Reported fraud losses by first contact, 2024Total lost, as reported to the FTC

Contact method	Total lost, as reported to the FTC
Phone calls	$948M
Text messages	$470M

Source: FTC, Consumer Sentinel Network Data Book 2024

How to do a reverse phone lookup for free

You can identify many callers with five free checks: search the number in several formats, look for messaging-app profiles, read spam reports, check the area code and line type, and log every clue with its source. Do them in order, because each one tells you what to look for in the next.

Search the web and messaging apps

Search the number in every format, in quotes. Websites write numbers differently, and search engines don't always match them. Try "555-010-0199", "(555) 010-0199", "5550100199" and "+1 555 010 0199" on Google and Bing. A business number usually surfaces on its own site or a listing within the first page. A personal number may turn up on an old classified ad, a club roster or a resume.
Save it as a contact and open your messaging apps. WhatsApp, Telegram and Signal match accounts by phone number, so adding the number to your contacts shows whether an account exists. WhatsApp lets each user choose whether their photo is visible to everyone or only to contacts. On Signal, the default setting for who can find you by number is "Everybody" (Signal), while Telegram shows a user's number only to their own contacts by default (Telegram). A photo and a display name are often the fastest way to put a face on a number.

Check spam reports and the line type, then log it

Read the spam labels and community reports. Your phone may already have an answer. Android's Phone app, iPhone call filtering and the big US carriers' spam tools label numbers that many people have reported. Community sites where people post about numbers that called them help too. Five reports of the same "your car warranty is expiring" script tell you what you need to know.
Check the area code and the line type. The area code tells you where the number was first assigned, not where the caller is: people keep their numbers when they move or switch carriers. A free line-type lookup shows whether it's mobile, landline or VoIP. VoIP numbers are cheap to create and throw away, which is why so many scam calls use them.
Write down where each clue came from. A screenshot, a URL and the date for every finding. If this ends up with your bank, the FTC or the police, a documented trail is worth far more than "I found it online."

Don't call or text the number back to test it. The FTC advises against pressing any numbers on a robocall, even to be taken off the call list (FTC). Calling back also tells the owner someone is checking on them. Passive checks leave no trace on the other side.

If the number is tied to an email address in a breach record or an ad, you now have a second lead. Run a reverse email lookup on it, and see how to find social media accounts from an email to widen the search.

Illustrative example · masked data

Messaging appsWhatsApp and Telegram accounts
Web mentions2 listings with the same number
Data breaches1 record, 2021
Owner called or textednever

Type your own number above and press Enter to run the same checks.

Can the number on your caller ID be fake?

Yes. The FTC says: "Scammers can make any name or number show up on your caller ID" (FTC). That's called spoofing. When a call is spoofed, the number you see belongs to someone else, often a random person or a real business, who has no idea their number was used.

Spoofing is where most phone lookups go wrong. You look up the number, find a name, and that person is innocent. Confronting that person helps no one and can put you in the wrong. Before you contact anyone, ask whether the call could have been spoofed. Robocalls that impersonate a bank, a government agency or a local number are the usual suspects.

What STIR/SHAKEN does and doesn't fix

US carriers now sign calls with a caller ID authentication standard called STIR/SHAKEN. The FCC required the largest voice providers to use it in the IP parts of their networks by June 30, 2021, and said it would help providers catch illegally spoofed calls before they reach subscribers and help law enforcement track bad actors (FCC).

It has a gap. STIR/SHAKEN only works on IP networks, and any older non-IP link in the call path strips the authentication. In April 2025 the FCC said that gap "bad actors can exploit" and proposed rules to close it (FCC). So a "verified" label is a good sign, but a missing one proves nothing either way.

Scam calls haven't gone away either. The FTC received 2,618,077 Do Not Call complaints in fiscal year 2025, and 1,601,611 of them were about robocalls. That's down from 5,008,987 complaints in 2021, but imposters were still the second-largest topic (FTC DNC Data Book).

Who can identify a phone number: free tools, carriers or police?

Free checks find numbers that are public. Paid lookups search more sources at once, including breach records. Carriers can block and label calls. Getting subscriber records from a phone company takes legal process, which in practice means law enforcement with a subpoena or court order. Which route fits depends on whether you need a lead, protection or evidence.

Route	What it can tell you	Cost	Alerts the owner?
Search engines	Public pages, listings and ads that mention the number	Free	No
Messaging apps	Whether an account exists, sometimes a name and photo	Free	No, if you don't message
Spam labels and community reports	Whether others flagged the number, and what the calls were about	Free	No
Calling or texting back	Whether the line is live and who answers	Free	Yes
Paid OSINT or people-search lookup	Messaging presence, web mentions and breach records in one search, quality varies by provider	Paid	Depends on the method; passive checks don't
Your carrier	Spam labels, call blocking and filtering; it won't name the caller	Often included in your plan	No
FTC report	Nothing back to you, but reports feed law enforcement cases	Free	No
Police, with legal process	Subscriber name, address, payment method and call records from the carrier	Free, if they take the case	Usually not

The last row is the one people ask about most. Under federal law, a phone company must hand over a subscriber's name, address, connection records, length of service and means of payment when the government serves it with an administrative, grand jury or trial subpoena (18 U.S.C. § 2703).

A private person can't make that request. If you're being threatened or harassed, a police report is the route to the carrier's records.

For scam calls, report to the FTC at ReportFraud.ftc.gov if you lost money, or at DoNotCall.gov if you didn't. The FTC asks for the number that appeared on your caller ID, plus any callback number the caller gave you (FTC). Include it even if you suspect it was spoofed.

How do you know a result is really the owner?

You confirm it when two independent sources point to the same person. A WhatsApp photo that matches a LinkedIn profile listing the same number is strong. A name from one people-search site copied onto three others is one source seen four times. Until two unrelated findings agree, treat a result as a lead.

Numbers get recycled

Carriers reassign disconnected numbers to new customers, and the FCC says millions of numbers are reassigned each year (FCC). A name attached to a number in a 2018 breach or an old classified ad may belong to the previous owner. Prefer recent sources, and check whether the dates line up with the call you got.

Messaging profiles can mislead

A display name and photo are whatever the account owner typed and uploaded. Scammers use stolen photos and business logos. If the photo looks like a stock image or a model, run a reverse image search before you trust it. Our guide on who is behind a fake profile covers those checks step by step.

Spoofing overrides everything

If the call could have been spoofed, even a perfect match only tells you who owns the number, not who called. Look for signs that fit the actual call: the caller knew things only that person would know, or the texts continued from the same number in a real conversation.

Is a reverse phone lookup legal?

Looking up public information about a phone number is legal in most countries. The law cares about what you do with the result. In the US, reports used for employment, housing or credit fall under the Fair Credit Reporting Act, and a disclaimer saying "not for FCRA purposes" doesn't get the provider off the hook (FTC).

In practice: checking who called you, vetting a seller on a marketplace, confirming a business contact or investigating a scam are fine. Screening a job applicant or a tenant with a people-search tool is not. Using what you find to follow, contact or pressure someone can be stalking. Federal law makes it a crime to use the mail, the internet or other electronic communication services for a course of conduct meant to harass or intimidate someone that causes substantial emotional distress or fear for their safety (18 U.S.C. § 2261A), and state laws cover stalking too. In the EU and UK, the GDPR also governs what you collect and keep about a person. This isn't legal advice; our responsible use policy spells out what we allow.

Reverse phone lookup checklist

Run the free, passive checks first, confirm with two independent sources, and bring in the FTC or police when you need action.

Search the number in quotes in every format, then save it as a contact to see messaging-app profiles.
Read your phone's spam label and community reports, and check the area code and line type.
Log a screenshot, URL and date for every finding, and don't call or text the number back.
Assume the caller ID may be spoofed, and treat any name as a lead until two unrelated sources agree and the dates fit.
Report scam calls to the FTC, and go to the police if you're threatened; only they can get the carrier's records.

Running a phone lookup with Rocksosint

Rocksosint checks where a phone number shows up across open sources: messaging-app presence, web mentions and breach records. Every finding comes with the source it came from, so you can open it and judge it yourself instead of trusting a name with no trail behind it.

The checks are passive. Rocksosint doesn't call the number, send it a text, or notify the owner in any way. It won't give you a live location, and it can't promise a caller's name when the number has left no public footprint. A number with no results is a finding too: new, private, or disposable. How each module works, and what it can miss, is on our methodology page.

Frequently asked questions

Is there a truly free reverse phone lookup?

Partly. Searching the number in quotes, saving it as a contact to see messaging-app profiles, checking your phone's spam label and reading community reports all cost nothing, and together they identify many callers. What free sites rarely give you is a verified name: most show a teaser and charge for the rest. Treat any name they return as a lead that still needs checking.

Can I find out who owns a number without them knowing?

Yes, if you stick to passive checks. Search engines, spam databases, breach records and saving the number in your contacts don't send the owner anything. Calling, texting, or tapping "message" in an app does. Be aware that if your own messaging profile is public, the owner can see your photo if they look you up too.

Can you trace a spoofed phone number?

Not by yourself. A spoofed call shows a number the caller doesn't own, so looking it up points to an innocent person or to nothing. Carriers and law enforcement can follow the call through the networks that carried it, and STIR/SHAKEN authentication helps with that on IP networks. Report the call to the FTC with the number you saw, even if you think it was fake.

Is it legal to look up who owns a phone number?

Checking public information about a number is legal in most countries. The use is what's regulated. In the US, results can't be used for hiring, housing or credit decisions outside the FCRA, and stalking and harassment laws apply everywhere. See our responsible use policy.

Can you look up a VoIP or burner number?

You can usually tell that a number is VoIP from a line-type check, but the owner is harder to find. Internet calling apps hand out numbers with little identity checking, and prepaid lines often have no name attached at all. Web mentions, messaging profiles and breach records can still connect a burner to a person if it was reused anywhere.