About EndSpam

Why EndSpam exists

When a scam or spam call arrives, the official advice is to report it — to Scamwatch, to the ACMA, to your telco. Those reports matter, but they disappear into aggregate statistics: nobody picking up the phone next week can see that the exact number that just called them has already been reported fifty times this month. The big caller-ID apps fill some of that gap, but they sit behind app installs and accounts, their data is a closed black box, and their coverage of Australian numbers is patchy.

EndSpam takes the opposite approach: a public, per-number record that anyone can check in a browser before calling back, built entirely from reports by the people who actually received the calls. Every public page shows its evidence — how many independent people reported the number, what they reported it as, and what they said in their own words. No web-of-trust scores you can't inspect, no paid tiers for basic safety information.

The project started in 2026 as a hobby-scale community effort and is run as one still — independent, not affiliated with any telco, government agency, or blocking-app vendor. It is built and operated by Bowen Chang Pty Ltd. The live statistics page publishes the current size of the dataset, and the guides section carries our editorial coverage of the Australian scam-call landscape.

What we publish

A number gets a public page at /number/<number> only when it has at least three approved community reports from at least two independent reporters, at least one approved written comment describing the call, and no verified owner or dispute upheld by our moderators. Numbers below that bar can still be looked up on the home page, but they don't get an indexable page — one or two reports are not enough to say anything reliable about a number, and they could identify a private individual.

Each page shows the report count, the number of independent reporters, what people reported the number as, the most recent reports in their own words, the carrier and area the number is allocated to, and a risk level. Nothing on a page identifies a reporter.

How reports are moderated

• Every report passes automated checks for spam, abuse and personal information before it counts. Reports that fail are held and never shown.
• Written comments go through automated checks before they appear publicly: comments that pass are published straight away, and comments the checks flag are held for a moderator. Moderators can also review a comment after it is published. Comments that name individuals, include phone numbers or other personal details, or make accusations we can't support are edited or removed; an edited comment is marked "Edited by moderator".
• Reports from the same person or device are counted once. A number's "independent reporters" figure is what the risk score and the public-page threshold are based on.
• Duplicate, retracted and obviously mistaken reports (wrong number, legitimate business) are weighed against the rest rather than hidden — a number that many people report as a legitimate business is labelled that way.

How the risk score works

The 0–100 risk score combines three things: how many independent people reported the number, how recently it was last reported, and what they reported it as (scam reports weigh more than telemarketing). The score maps to a Low, Medium or High risk level. It is a summary of community reports, not a verdict — a High score means many unrelated people had a bad experience with the number recently, not that every call from it is malicious.

If it's your number

Businesses and individuals can claim a number and, after verification, have their name shown on its page or dispute the reports against it. While a dispute is open the number's public page is withdrawn. Claims and disputes are handled through the number's page or by email.

Accuracy and corrections

A community report is a claim by one person about one call, and communities get things wrong — wrong numbers, mistaken identity, a bad day at a legitimate business. We manage that risk structurally rather than editorially: nothing is published from a single report, every public page needs several independent reporters plus a written description, and the aggregate risk score weights recency so stale accusations fade. Legitimate businesses flagged in error are the failure mode we watch for most closely — the claim-and-dispute process above exists precisely for them, and a disputed page comes down immediately, before any resolution.

Found something wrong? Tell us — support@endspam.org — and we'll correct or withdraw it. Corrections are made silently and promptly; a public register that can't fix its own mistakes isn't worth trusting.

Privacy

EndSpam identifies phone numbers internally by a keyed cryptographic hash, and looking up a number on the website does not save its full digits to our database. We do store the full digits of numbers people report, because we need them to publish public number pages and to build our iOS app's blocking list. The iOS app also stores full numbers that a signed-in user keeps in their private search history or that a user adds to a personal block list. A number is shown publicly in full only once it meets a public-disclosure threshold; until then, it is shown publicly only by its last four digits. Public number pages never identify who reported a number. Comments shown with lookup results can include a name the commenter typed in or, for signed-in users, their public name or handle, depending on their settings. The full detail, including the cookies and browser storage this site uses, is in our privacy policy.

Contact

Corrections, takedown requests, owner claims, press and anything else: support@endspam.org. Please don't include passwords, one-time codes or other sensitive details in email. Help with the EndSpam AU iPhone app is on our support page.

Scam victims should also report to Scamwatch; our what to do if you've been scammed guide walks through the steps.