h.
HUHU.fr
REGULATIONS
August 2, 20266 min read

Spoofed French mobile numbers from abroad: what does ARCEP's 2026 masking rule really change?

Marc PetitHUHU.fr Editor

Since 1 January 2026, an international call displaying a French mobile number without sufficient authentication must be shown as a masked number. Here is what that really changes for subscribers, operators, and sales teams.

Spoofed French mobile numbers from abroad: what does ARCEP's 2026 masking rule really change?

Since 1 January 2026, French operators have had to apply a more visible rule against mobile-number spoofing. When a call comes from abroad, displays a French mobile number, and cannot be properly authenticated, the caller ID must now be masked.

The official sources reviewed on 2026-08-02 converge on an important point: this does not end spoofing, but it more often removes the psychological advantage of a familiar French mobile number on screen. To place this rule in the wider phone-trust stack, you can also read our article on MAN, STIR/SHAKEN and branded calling and our guide on which reporting channel to use for voice fraud.

What ARCEP actually says

ARCEP states that from 1 January 2026, an international call presenting an unauthenticated French mobile number must be shown with its caller ID masked. The authority ties this change to numbering-plan updates adopted in late 2025 to strengthen protection against number spoofing.

Another key nuance: the measure targets how the call is presented, not an automatic fraud verdict. A masked number may signal a suspicious call, but it may also reflect a legitimate call whose authentication could not be transported correctly through the telecom chain. France's public-service guidance makes the same point: seeing a masked number does not automatically mean the call is fraudulent.

Why this measure became necessary

Fraudulent calls coming from abroad while displaying a French mobile number had become a simple way to bypass user caution. A visible French mobile number inspires more trust than an unknown international number or a masked call. By requiring masking when authentication is insufficient, ARCEP aims to weaken the visual deception value of those calls.

This is not only a consumer issue. It also affects companies relying on international call flows, offshore outsourcing, or complex telecom architectures. The rule sends a clear operational message: a French mobile number can no longer be used casually as a visual cover for a call whose real origin remains opaque.

What changes for consumers in practice

  • A displayed French mobile number on an incoming international call deserves slightly more trust than before, because unauthenticated cases should now be masked.
  • A masked number is not automatically fraudulent: it may also come from a legitimate roaming case or an authentication transport issue.
  • Caution still matters: the new signal helps triage, but it does not replace common sense or the right reporting channels.

Many quick summaries imply that foreign calls showing French mobile numbers are now blocked. That is not what the official texts say. In 2026, the primary logic is the masking of the number when it is not authenticated, not the systematic blocking of every such call.

Why this rule does not remove every suspicious call

1. Masking is not a fraud verdict

A masked call may come from a scammer, but it may also reflect a temporary technical situation. Roaming, interconnection, and incomplete authentication transport remain real sources of complexity.

2. Authentication depends on the full operator chain

Trust does not depend only on the end caller. It also depends on whether originating, transit, and terminating operators preserve and validate the authentication information. That is why the rule is useful without being magical.

3. Final caller-ID behaviour still depends on devices and software layers

Even with better network traceability, the user experience still depends on the smartphone, the calling app, and the reputation or enrichment systems used in the ecosystem. Regulatory masking strengthens the foundation, but it does not replace existing anti-spam tools.

What this changes for businesses and call centres

For operations, compliance, and sales teams, the rule forces a second look at call setups that remain too opaque. A call centre operating outside France should not treat a French mobile number as a detached display label. The more externalised the call chain is, the higher the risk of masking or credibility problems.

  • Check that your international call flows and telecom partners transmit authentication information correctly.
  • Do not use a French mobile number as a simple visual front for calls emitted from infrastructure that cannot carry the same network trust.
  • Document roaming, forwarding, or complex routing cases that may explain unexpected masking.

If you need to formalise these points internally, our FAQ already covers common questions about masked, flagged, or misunderstood numbers.

Three useful reflexes for 2026

For subscribers

  • Do not assume a call is trustworthy only because a French mobile number is displayed.
  • When a masked number appears on an unexpected call, avoid calling back immediately and verify the context through a trusted channel.
  • In suspected spoofing cases, use official guidance and the right reporting routes instead of improvising.

For sales teams

  • Audit your caller-ID presentation chain regularly, especially if part of the traffic originates abroad.
  • Explain internally that a masked number may also reflect an authentication issue, not only obvious fraud.
  • Anticipate the commercial impact: an unexpected masked call will reduce trust and likely lower answer rates.

FAQ

Since 2026, is a masked call coming from abroad automatically fraudulent?

No. Official sources explicitly say that a masked number may also correspond to a legitimate call that could not be authenticated correctly. Masking is a caution signal, not definitive proof of fraud.

Does the rule only target numbers starting with 06 and 07?

In practice, the measure was first understood through 06/07 mobile numbers because they are the most sensitive from a user-trust perspective. The broader point retained here is that when an international call displays a French mobile number without sufficient authentication, it must be presented as masked.

What does this change for a call centre?

It requires checking that the displayed number, the right to use that number, and the technical authentication chain all tell the same story. If they do not, the call may be masked or lose commercial credibility.

About the Author

Marc Petit

HUHU.fr Editor

Everything you need to know about telephony for your sales teams. We strive to provide as many articles as possible to support your commercial growth.

Articles in Regulations

Voice fraud: when should you contact your bank, your carrier, PHAROS, or 33700?
Regulations

Voice fraud: when should you contact your bank, your carrier, PHAROS, or 33700?

When a fraudulent call hits, sending everything through the same channel is a mistake. Here is which route to use depending on whether the issue is banking vishing, voice spam, an operator-side report, or an actual financial loss.

Jul 21, 20267 min
Evidence to keep after a fraudulent call: screenshots, timestamps, audio, operator
Regulations

Evidence to keep after a fraudulent call: screenshots, timestamps, audio, operator

After a fraudulent call, the right evidence is more than a screenshot. Here is what to keep, in which order, and how to route the file to 33700, Arcep, an operator, or a formal complaint.

Jun 27, 20266 min
Call Center Fined €250,000 by CNIL: October 2025 Decision Analysis
Regulations

Call Center Fined €250,000 by CNIL: October 2025 Decision Analysis

In October 2025, CNIL fined a call center €250,000 for data minimization failures, excessive retention periods, and security breaches. Analysis of the violations and key takeaways.

Mar 3, 20264 min
France Telemarketing Rules 2026: New Consent Laws & Penalties
Regulations

France Telemarketing Rules 2026: New Consent Laws & Penalties

Mandatory consent by August 2026, end of caller ID spoofing, fines up to €420,000: France's new telemarketing regulations explained.

Feb 14, 20265 min
CNIL Fine €900,000: Analysis of the SOMS Decision on Abusive Telemarketing
Regulations

CNIL Fine €900,000: Analysis of the SOMS Decision on Abusive Telemarketing

€900,000 CNIL fine for SOMS: dark patterns, invalid consent and 2026 opt-in revolution. What businesses must change now.

Feb 7, 20266 min
Phone Prospecting and CNIL: Audits to Anticipate in 2026
Regulations

Phone Prospecting and CNIL: Audits to Anticipate in 2026

On-site inspections, hearings, record fines: how to prepare your call center for CNIL audits and avoid penalties that can reach millions of euros.

Feb 7, 20264 min

Protect your numbers now

Monitor your number reputation and anticipate blocks before they impact your conversions

Spoofed French mobile numbers from abroad: ARCEP 2026 rule | num.huhu.fr | HUHU.fr