From Signup Form to Spam Caller: The Underground Economy Selling Your Phone Number for Pennies

You signed up for a coupon website three years ago. Maybe you entered a sweepstakes, bought something from an online retailer, or filled out a warranty card. You probably forgot about it within the hour. But somewhere in the digital infrastructure humming beneath that transaction, your phone number got tagged, filed, and quietly put up for sale.

This isn't a conspiracy theory. It's a legal, multi-billion dollar industry — and it's a big reason your phone won't stop ringing.

The Brokers You've Never Heard Of (But Who Know Everything About You)

Data brokers are companies whose entire business model revolves around collecting, aggregating, and reselling personal information. We're talking about firms like Acxiom, LexisNexis Risk Solutions, Spokeo, Whitepages, BeenVerified, and Intelius — just to name a few of the more visible players. There are hundreds more operating in the background, many of them subsidiaries or white-label operations you'd never recognize by name.

These companies vacuum up data from an enormous range of sources: public records, loyalty programs, social media activity, app permissions, retail purchase histories, voter registration rolls, and yes — those terms-of-service agreements you clicked through without reading. Your phone number is one of the most valuable data points they collect because it's persistent, personal, and — unlike a mailing address — almost always leads directly to a live human.

Acxiom alone claims to hold data on over 2.5 billion consumers worldwide. Their U.S. consumer database is among the most comprehensive ever assembled by a private company. LexisNexis Risk Solutions, a division of RELX Group, sells consumer data to insurance companies, financial institutions, and yes, marketing operations that aren't always as reputable as the clients they claim to serve.

What Your Number Is Actually Worth

Here's the part that'll make your jaw drop: your phone number, bundled with basic demographic data like your age range, estimated income, and zip code, can sell for as little as $0.001 to $0.05 per record in bulk. Spam operations buy lists of tens of millions of numbers at a time. At those volumes, even fractional cent pricing adds up to significant revenue for brokers — and gives robocallers an essentially unlimited supply of targets for almost nothing.

More targeted lists command higher prices. A list of phone numbers tied to people who recently searched for Medicare supplemental insurance, for example, might sell for $0.10 to $0.50 per record. Lists connected to recent financial distress signals — like credit inquiries or mortgage delinquency flags — can go even higher. The specificity is what drives the price, and data brokers are very good at specificity.

Once a list is sold, it doesn't disappear. It gets resold. And resold again. A phone number that entered the pipeline in 2019 might still be circulating through broker networks today, refreshed with new behavioral data collected along the way.

How the Pipeline Actually Works

Let's walk through a realistic scenario. You download a free flashlight app (yes, people still do this) that requests access to your contacts and location data. That app's developer sells your data to a mid-tier aggregator — let's call them a "data enrichment" company — who cross-references it with public records to build a fuller profile. That profile gets sold to a larger broker like Whitepages or a lesser-known reseller operating under a name you'd never recognize.

From there, the data gets packaged into marketing lists and sold through broker marketplaces, some of which operate like actual auction platforms where buyers bid on list segments. A telemarketing company — which might be running legitimate operations or might be a front for a full-blown robocall scam — purchases the list. Your number is now in a dialer system, queued up alongside millions of others.

The whole process, from app download to spam call, can take as little as a few weeks.

The Legal Gray Zone Brokers Live In

Here's the infuriating part: most of this is perfectly legal. The U.S. doesn't have a comprehensive federal data privacy law that restricts how brokers collect and sell consumer information. The closest thing we have is the California Consumer Privacy Act (CCPA), which gives California residents the right to opt out of data sales and request deletion. A handful of other states — Virginia, Colorado, Connecticut, and Texas among them — have passed similar legislation, but enforcement is inconsistent and coverage is incomplete.

The FTC has taken action against some data brokers, most notably a 2023 action against data broker Kochava for allegedly selling sensitive location data. But the agency's enforcement resources are limited, and the sheer volume of brokers operating in this space makes comprehensive oversight nearly impossible.

The Telephone Consumer Protection Act (TCPA) restricts certain types of robocalls and requires prior express consent for marketing calls to cell phones — but scammers simply ignore it, and legitimate brokers argue they're not making the calls themselves, just selling the data.

What You Can Actually Do

The good news is that you're not entirely powerless, even if the system isn't set up to make this easy.

Opt-out requests work — but they require effort. Major brokers like Spokeo, BeenVerified, Whitepages, and Intelius all have opt-out processes. They're deliberately buried, often require you to verify your identity, and may need to be repeated periodically as new data gets added. Services like DeleteMe and Privacy Bee exist specifically to handle these opt-outs on your behalf for a subscription fee — worth considering if you'd rather not spend hours navigating each broker's removal process individually.

The National Do Not Call Registry helps at the margins. Registering your number at donotcall.gov won't stop scammers, but it does give you legal standing to report violations and can reduce calls from legitimate telemarketers. It's free and takes about two minutes.

Your carrier's built-in tools are underutilized. AT&T ActiveArmor, T-Mobile Scam Shield, and Verizon Call Filter all offer varying levels of spam detection and call blocking. They're not perfect, but they're free and worth activating if you haven't already.

Call-blocking apps add another layer. Apps like Hiya, Nomorobo, and the tools built into CallBuster's platform use continuously updated databases of known spam numbers to intercept calls before they even reach you. Since spam lists get recycled, a number flagged by one user often ends up blocked for thousands of others.

The Bigger Picture

The data broker industry isn't going away. It's too profitable, too legally protected, and too deeply embedded in the digital economy to be dismantled anytime soon. What can change is how much access these companies have to your information going forward — and how aggressively you protect the data you've already put out there.

Every time you hand over your phone number to a website, app, or retailer, you're potentially feeding a pipeline that ends with your phone ringing at dinner. That doesn't mean you should never share your number — just that you should be thoughtful about when and where you do it.

Your number isn't just a way to reach you. To the data broker industry, it's a commodity. Treat it like one.