Why You Get Spam Calls: The Data Broker Pipeline Behind Every "Potential Spam" on Your Phone

Published September 5, 2026 | 10 min read

Key Takeaways

The Pipeline Nobody Talks About

Every time your phone displays "Potential Spam" or "Scam Likely," there is a chain of companies that made that call possible. Not just the caller — an entire infrastructure of data brokers, lead generators, VoIP providers, and gateway carriers that exists specifically to connect your phone number with someone who wants to sell you something, scam you, or steal your identity.

Understanding this pipeline is the difference between playing defense (blocking individual calls after they arrive) and playing offense (removing your phone number from the system that generates them).

The Five-Step Spam Call Pipeline

1 Data Brokers Collect Your Phone Number

Over 1,500 data brokers maintain databases containing your phone number, name, address, email, and demographic information. They collect this data from public records, app SDKs that harvest your contact list, website registrations, loyalty programs, and other data brokers. Your phone number is a commodity — bought and sold hundreds of times without your knowledge.

2 Lead Generators Buy and Package Your Number

Lead generation companies purchase phone numbers from data brokers in bulk — often millions of numbers at a time — filtered by demographics like age, location, income, homeownership status, or recent purchases. They package these into "lead lists" sold to businesses and telemarketers. A lead list of 10,000 phone numbers for people over 60 who own their home costs as little as $500. Your number might appear on dozens of different lead lists simultaneously.

3 Call Centers Purchase the Lead Lists

Domestic and overseas call centers buy these lead lists and load them into auto-dialers — software that can place thousands of calls per hour. Some are legitimate telemarketing operations with poor compliance practices. Others are outright fraud operations running from countries with weak enforcement. Many use AI voice technology that sounds human, making it harder to distinguish a real sales call from a scam. The call center that contacts you may have no direct relationship with the company being advertised — they are contractors, often several layers removed from the brand whose name they use.

4 VoIP Providers Supply the Phone Numbers and Infrastructure

Call centers purchase blocks of phone numbers from Voice over IP (VoIP) providers like Sinch, ONVOY, Twilio, or dozens of smaller companies. These numbers are cheap — often pennies per number — and disposable. When a number gets flagged as spam, the call center simply moves to a new number from the same block. The VoIP provider supplies the infrastructure to make thousands of simultaneous calls from anywhere in the world while displaying a local area code on your caller ID. The number you see on your phone may show a 763 area code while the actual caller sits in a call center overseas.

5 Gateway Carriers Route the Calls Into the US Phone Network

The final link in the chain: gateway carriers like Lumen, Peerless, Bandwidth, and Inteliquent accept calls from VoIP providers and route them into the traditional phone network where they reach your carrier (T-Mobile, AT&T, Verizon) and ultimately your phone. These four companies handle the majority of robocall traffic in the United States. In December 2025, all 51 state attorneys general sent formal warning letters to these four carriers demanding they stop transmitting suspected illegal robocalls.

Why Call-Blocking Apps Do Not Solve the Problem

Call-blocking apps like Hiya, Nomorobo, and your carrier's built-in spam filter operate at Step 5 — after the call has already traveled through the entire pipeline and arrived at your phone. They analyze the incoming number against known spam databases and either block it or label it "Potential Spam."

This approach has three fundamental limitations. First, scam callers rotate through thousands of phone numbers. Block one, and they call from a different number tomorrow. Second, legitimate calls sometimes get flagged as spam, causing you to miss real calls from doctors, pharmacies, or businesses you actually want to hear from. Third, and most importantly, blocking does nothing to remove your phone number from the data broker databases that feed the pipeline. Your number remains for sale, generating new lead lists and new calls indefinitely.

Call-blocking is a filter on a fire hose. It reduces what gets through, but the water keeps flowing.

The Root Cause: Your Phone Number Is For Sale

The reason you receive spam calls is not that scammers randomly dialed your number. It is that your phone number exists in commercial databases maintained by over 1,500 data brokers, and those databases are available for purchase by anyone — legitimate businesses, aggressive telemarketers, and outright criminals alike.

The data brokers do not care who buys the data. A lead generation company purchasing 100,000 phone numbers for a "Medicare supplement" marketing campaign looks identical in their system to a fraud operation purchasing the same list to run a Medicare scam. The broker sells the data. What happens with it is someone else's problem.

This is why the most effective spam call reduction strategy is not blocking calls after they arrive. It is deleting your phone number from the databases that generate the calls in the first place.

The Numbers Are Staggering

The Federal Trade Commission and the Federal Communications Commission have been fighting robocalls for over a decade. The results of that fight illustrate the scale of the problem.

In April 2026, Americans received 4.2 billion robocalls — approximately 140 million per day, or 1,600 per second. The average American receives 13 robocalls per month. In fiscal year 2025, the FTC received over 2.6 million Do Not Call complaints from consumers. The average person who loses money to a scam call loses $3,690.

The FCC took its most aggressive action to date in August 2025, effectively shutting down 1,400 phone companies by removing them from the Robocall Mitigation Database — forbidding other carriers from accepting their calls. Since then, 14 more companies have been removed as recently as September 2026. Despite these enforcement actions, robocall volume increased 16% in 2025 compared to the previous year.

The enforcement actions are a game of whack-a-mole. Shut down one carrier, and the call centers move to another. The underlying cause — data brokers selling your phone number — remains untouched by every FCC enforcement action, every state attorney general investigation, and every call-blocking app on the market.

The Legal Landscape Is Shifting

Three legal developments are creating accountability across the spam call pipeline for the first time.

First, the FCC's consent revocation rule, effective April 2025, allows consumers to revoke consent to telemarketing calls by any reasonable means — saying "stop" on a call, texting "stop," or telling a representative to remove you. Companies have 10 business days to comply. Every call after that is a willful violation of the Telephone Consumer Protection Act, carrying statutory damages of $1,500 per call.

Second, federal courts are expanding liability to intermediate carriers. In the landmark case Mey v. Got Warranty, a federal court ruled that VoIP providers and intermediate carriers can be treated as "makers" of illegal robocalls if they have sufficient involvement or actual notice of illegal use and fail to act. This means the carriers that route the calls — not just the callers themselves — can be held liable.

Third, all 51 state attorneys general have formed the Anti-Robocall Multistate Litigation Task Force. In December 2025, they escalated to "Phase 2," targeting the four largest gateway carriers — Lumen, Peerless, Bandwidth, and Inteliquent — demanding they stop transmitting suspected illegal robocall traffic. ONVOY, the carrier behind many VoIP numbers used by robocallers, received over 9,700 traceback notices for suspected illegal calls since 2019.

What Actually Reduces Spam Calls

1 Delete your phone number from data broker databases. This is the root cause solution. Every data broker that holds your phone number is a potential source of lead lists that generate spam calls. Send CCPA deletion demands to all of them — not just the people-search sites, but the marketing data brokers and lead generation companies that supply phone numbers to call centers. This takes 100-200 hours to do manually, or an automated service handles it for you.

2 Register on the National Do Not Call Registry. Go to donotcall.gov and register every phone number you own. After 31 days, every telemarketing call to a registered number is a federal violation. This does not stop illegal callers, but it creates legal liability — $500-$1,500 per call — that you can use in a lawsuit.

3 Revoke consent on every call. When a telemarketer calls, say the words: "Remove my number from your list and do not call me again." Under the April 2025 FCC rule, they have 10 business days to comply. Document the date and time. Every subsequent call is a willful violation at $1,500 in statutory damages.

4 Use your carrier's spam filter. T-Mobile Scam Shield, AT&T Call Protect, and Verizon Call Filter are free tools that label or block suspected spam. They do not solve the problem, but they reduce the number of calls that ring through while you work on the root cause.

5 Document and report. Every spam call you receive is potential evidence. Screenshot your call log. Note the date, time, number, and what the caller said. File complaints with the FTC at reportfraud.ftc.gov and with the FCC at consumercomplaints.fcc.gov. These reports feed the enforcement databases that regulators use to identify and shut down illegal callers.

6 Record calls in one-party consent states. If you live in a one-party consent state — including North Dakota, Texas, and 36 other states — you can legally record any phone call you are a party to without informing the other party. A recording of a telemarketer refusing to honor your Do Not Call request is evidence that can be used in a TCPA lawsuit. Free apps like Cube ACR record both sides of every call automatically.

The Math of a TCPA Lawsuit

The Telephone Consumer Protection Act provides statutory damages of $500 per unauthorized call, or $1,500 per call if the violation is knowing or willful. "Knowing or willful" means the caller continued calling after you asked them to stop — which is exactly what happens when telemarketers ignore your Do Not Call request.

Consider a real scenario: a timeshare company calls you 28 times over six months despite multiple verbal requests to stop. At $1,500 per willful violation, that represents $42,000 in statutory damages. TCPA attorneys take these cases on contingency — you pay nothing upfront, and the attorney takes approximately one-third of the recovery. A pro se plaintiff in Texas recently won a $23,405 default judgment representing himself, without an attorney.

The irony is that the companies making these calls know the law. They calculate that most people will not document the calls, will not file complaints, and will not sue. For every person who pursues a TCPA claim, thousands simply block the number and move on — which is why the calls continue.

Every spam call starts with your phone number in a database you never consented to. Call-blocking apps are a bandage. The Do Not Call Registry is a speed bump. The only permanent solution is removing your phone number from the data broker databases that feed the pipeline. Stop the supply of your phone number, and the calls stop following it.

Delete Your Phone Number from 1,493 Data Broker Databases

We send legal CCPA deletion demands to 1,493 data brokers — including the marketing data brokers and lead generators that sell your phone number to call centers. Every deletion demand includes your phone number with instructions to delete all records associated with it. Continuous 45-day resubmission. $9.95/month.

Start Your Free 7-Day Trial

No credit card required. Cancel anytime. We never sell your data.