How to Stop Spam Calls on iPhone: What Actually Works in 2026
TL;DR
- STIR/SHAKEN caller-ID authentication has real gaps. Smaller carriers sign only 17.5% of voice traffic, and up to 13% of known-invalid numbers still get the highest “A-level” trust rating.
- The fix is layered: turn on Apple’s Silence Unknown Callers, enable your carrier’s free spam filter (AT&T ActiveArmor, Verizon Call Filter, or T-Mobile Scam Shield), and install a third-party blocker with a live community database.
- Apple’s Call Directory Extension API loads a third-party blocker’s list directly into iOS, so checks happen before the phone ever rings.
- The community database matters more than the static blocklist. Look for an app that pulls from real-time user reports plus keyword rules and on-device AI detection.
- Never call back missed unknown numbers, never press buttons on a robocall, and never save a spam number to contacts to “block” it (that exempts it from filtering).
Your iPhone has had “Silence Unknown Callers” built in for years. Your carrier has a free spam filter. The FCC has spent the better part of a decade forcing carriers to implement caller ID authentication.
And yet here you are, still getting three robocalls a day from a number that looks a lot like your own.
If you feel like the spam call problem has gotten worse, not better, you’re reading the statistics right. The Transaction Network Services 2026 Robocall Report found that even with 85% of voice traffic between Tier-1 carriers now signed and verified under STIR/SHAKEN, scammers are routing calls through smaller carriers where signed traffic drops to around 17.5%. Up to 13% of traffic using known-invalid numbers is still getting “A-level” attestation — the highest trust rating the system has. In plain English: the plumbing meant to stop spoofed calls has leaks, and scammers know exactly where they are.
This guide walks through the layered setup that actually works on iPhone in 2026 — what Apple gives you, what your carrier gives you, and where a third-party call blocker fills the gap. If you follow it, most spam calls will stop reaching you at all.
Why spam calls keep getting through
Before you set anything up, it helps to understand why the problem is this hard. Three things are working against you.
Number spoofing. A spam caller doesn’t have to call you from their real number. They can display whatever they want on your caller ID — including numbers that match your area code and exchange (the famous “neighbor spoof”), numbers that belong to real people, or numbers from government agencies. Blocking the number you see doesn’t matter, because the next call comes from a different fake number.
Variance blocking at scale. Spam campaigns cycle through hundreds or thousands of numbers a week. Any list that identifies spammers by specific phone numbers is out of date the moment it’s published. This is why reactive, number-based blocking — including Apple’s default “block this caller” — loses the war.
STIR/SHAKEN’s blind spots. The caller ID authentication framework the FCC has pushed carriers to adopt is real progress, but the FCC’s own triennial report acknowledges it has gaps. Calls originating on non-IP legacy networks often can’t be signed at all. Over-attestation — where junk traffic gets signed with the “I vouch for this caller” seal anyway — runs as high as 20% on some networks. The system raises the cost of spoofing at scale, but it doesn’t stop it.
None of this means the tools are useless. It means you need more than one.
Step 1: Turn on Silence Unknown Callers
Apple’s built-in feature is the first line of defense, and most people still haven’t flipped it on. On iOS 18, open Settings, tap Apps, tap Phone, tap Silence Unknown Callers, and toggle it on. On older iOS versions it’s under Settings > Phone > Silence Unknown Callers.
When it’s on, any call from a number that isn’t in your contacts, hasn’t texted you recently, and isn’t in your Siri suggestions goes straight to voicemail. The call still shows up in your Recents list so you can see it came in. Emergency services bypass this setting for 24 hours if you’ve called 911 recently, per Apple’s support documentation.
This one toggle kills the vast majority of robocalls because robocallers almost never end up in your contact list. The catch: it also silences any legitimate caller you haven’t saved — the doctor’s office, a recruiter, a delivery driver. Go through your Recents every few days so you don’t miss anything important.
If you rely on calls from strangers for work, this setting alone will be too aggressive. Keep reading.
Step 2: Turn on your carrier’s free spam filter
Every major U.S. carrier has a free spam-detection layer that runs before the call ever reaches your phone. These are useful because they see traffic patterns at the network level that no app on your device can see — sudden call volume from a single origin, calls to numbers in sequence, and so on.
AT&T ActiveArmor is free and includes automatic fraud and spam call blocking. AT&T’s support pages describe what’s covered in the free tier. The paid Advanced Mobile Security upgrade adds reverse lookup and custom block lists for about $7 per line per month.
Verizon Call Filter comes free to every Verizon postpaid line and blocks high-risk spam calls automatically. Call Filter Plus adds caller name ID and personal block lists for a monthly fee. Verizon has a support page with setup details.
T-Mobile Scam Shield is free and includes scam likelihood warnings, scam blocking, and free annual number changes if spam gets bad enough to need a new line. Scam Shield Premium adds reverse lookup for around $4–5 per month. The Scam Shield page has enrollment instructions.
Turn this on regardless of what else you use. It costs nothing, and the calls it kills at the network level are calls you never have to think about.
Step 3: Add a third-party call blocker with a community database
Here’s where most people stop — and where they’re leaving the biggest gap uncovered.
Apple’s Silence Unknown Callers has one weakness: it treats every unknown number the same, whether it’s your kid’s new school nurse or a robocaller. Your carrier’s filter has a different weakness: it only knows what its own network sees, and it updates its blocklists on its own schedule.
Third-party call blockers on iPhone work differently. Apple exposes an API called a Call Directory Extension through its CallKit framework. When you install a call blocker and grant it permission in Settings > Apps > Phone > Call Blocking & Identification, the app loads its list of known spam numbers into iOS itself. From that point on, your iPhone checks every incoming call against that list before it rings, without the app having to be open.
The list is only as good as the data behind it. A static blocklist goes stale fast. What you want is an app that pulls from a community database — numbers reported by actual users who just got the same spam call you’re about to get — combined with keyword-based filtering that catches patterns instead of specific numbers, and AI detection for the calls that are new enough to not be in anyone’s database yet.
We build Not Today around exactly this layered approach. The community database is currently at 85,000+ reported numbers, growing every day from user reports. Keyword rules catch the social-engineering language that spammers reuse even when they rotate numbers. And the optional on-device AI detection flags new scam patterns before they’ve been reported enough times to make it into a static blocklist.
Whatever call blocker you pick, the question to ask is: how does its blocklist get updated, and how fast? If the answer is “we push updates weekly from a static vendor list,” it’s going to miss the campaigns that matter. Spam changes faster than that.
Step 4: Don’t undo your own work
A layered setup like this keeps most spam out of your life. There are a few ways to defeat it, though, and they’re things people do by habit.
Don’t call back missed unknown numbers. If a spammer slipped through and left no voicemail, calling back is exactly what they want. International premium-rate scams charge the calling-back party a per-minute fee that ends up on your phone bill. Even domestic callbacks tell the spammer your number is live.
Don’t press any buttons on a robocall. “Press 1 to speak to a representative.” “Press 9 to be removed from our list.” Both confirm your number is active and route you to a human who’s paid to get money out of you. Hang up.
Don’t save spam numbers as contacts to “block” them. Saving a number to contacts doesn’t block it — it does the opposite, exempting that number from your Silence Unknown Callers filter. If you want to block a specific number, use the built-in Block This Caller option in the Phone app or your third-party blocker.
Don’t stay on the line out of curiosity. Scam call operations measure success by time-on-call and response rate. The longer you stay, the more effort they’ll put into hitting your number again tomorrow. If a call is clearly spam, hang up within the first few seconds. The FTC’s unwanted calls guide has more on what the major current call-scam patterns look like if you want a refresher.
What to expect after you set it up
If you turn on Silence Unknown Callers, enable your carrier’s free filter, and install a call blocker with a live community database, you’ll see a dramatic drop in calls that actually ring your phone. The calls that still break through tend to be one of two things: a legitimate unknown number you genuinely want to hear from, or a fresh spam campaign using numbers that haven’t been reported yet.
The fresh ones are the hardest problem in the space. That’s why the community database matters — every time someone reports a number, the next person to get called from it gets protected. It’s a collective defense, and it only works if the people using it contribute back.
You won’t get to zero. No one does. But you can get to the point where spam calls stop occupying mental real estate — where you stop flinching every time your phone rings. That’s the realistic goal.
The short version
- Settings > Apps > Phone > Silence Unknown Callers — on.
- Your carrier’s free spam filter (ActiveArmor, Call Filter, or Scam Shield) — enrolled.
- A third-party call blocker with a live community database and keyword rules — installed and permissions granted in Settings > Apps > Phone > Call Blocking & Identification.
- Never call back, never press buttons, never engage.
If you’ve already got the spam text problem under control — see our guide to blocking spam texts by keyword on iPhone — this is the companion setup for calls.
Not Today is a free spam-blocking app for iPhone. We built it to catch spam before it reaches you, using keyword rules, a community database of 85,000+ reported numbers, and optional AI detection. No account required. Download on the App Store.