Your phone starts ringing and does not stop. One unknown number after another, sometimes dozens of calls in a few minutes. You cut one call and the next one is already ringing. If this has happened to you, there is a good chance someone used a call bomber on your number. This guide explains what a call bomber is, why people use it, whether it is legal in India, and – most importantly – the exact steps to stop the calls and protect yourself.
What is a call bomber?
A call bomber is an app, website or script that places a large number of calls to one phone number in a short time. The person using it simply enters a number, and the tool keeps calling it – often from many different numbers – so the phone rings again and again. It is the voice version of an SMS bomber, which floods a phone with OTP messages.
Most call bombers abuse services that call you automatically, such as "call me back" buttons, voice-OTP features on websites and apps, or cheap internet calling routes. The website or company behind each call usually has no idea its service is being misused.
Why do people use call bombers?
- Pranks: many users try it "for fun" on friends without realising how distressing it is.
- Harassment: to irritate, threaten or take revenge on someone.
- Distraction by fraudsters: scammers sometimes flood a phone with calls so the victim misses a genuine bank call or alert while fraud is happening on their account.
- Pressure tactics: some illegal recovery agents and scammers use repeated calls to create panic.
Is using a call bomber legal in India?
No. Flooding someone's phone with calls without their consent can amount to harassment and criminal intimidation, and misuse of computer resources and communication services can attract action under the Information Technology Act and other laws. It also breaks the terms of the telecom operator and of the services being abused. "It was only a prank" is not a defence if the victim files a complaint. If you are being targeted, you can and should report it.
Warning: do not download call bomber apps
Call bomber apps and APK files are not available on official app stores for a reason. Many of them contain malware that can read your SMS (including OTPs), contacts and photos, or show non-stop ads. Some even use your phone to make calls or send messages without you knowing. Installing one puts your own bank account at risk.
How to stop a call bomber: step-by-step
- Stay calm and do not call back. The calls cannot hack your phone or empty your bank account on their own. Calling back unknown numbers only wastes your balance and may connect you to a scammer.
- Turn on the spam filter. On Android, open the Phone app → Settings → Caller ID & spam and enable Filter spam calls. On iPhone, go to Settings → Phone → Silence Unknown Callers. Calls from numbers not in your contacts will go silently to voicemail or the call log.
- Use Do Not Disturb with "allowed contacts". Switch on Do Not Disturb and allow calls only from your contacts or favourites. Family and office can still reach you while the flood is ignored.
- Block the repeating numbers. Long-press a number in the call log and choose Block. This helps when the same few numbers keep calling.
- Switch on airplane mode for a short time. Most bombing attacks run for a limited period. Going offline for 15–30 minutes (and using Wi-Fi only if needed) often lets the attack end.
- Activate DND on your number. Send FULLY BLOCK to 1909 or use the TRAI DND app. It blocks registered telemarketing calls, which reduces some kinds of call flooding. Read our DND guide for details.
- Never share an OTP, PIN or password. If a caller during or after the flood claims to be from your bank, telecom company or police and asks for an OTP, cut the call. No genuine organisation asks for it.
- Check your bank and UPI apps. If the flood came with OTP messages you did not request, make sure no unknown transactions happened. If anything looks wrong, call your bank's official number at once.
Where to report a call bomber
| Situation | Where to report |
|---|---|
| Money lost or fraud attempt | Call 1930 immediately or file a complaint at cybercrime.gov.in |
| Suspected fraud calls or messages | Chakshu on the Sanchar Saathi portal (sancharsaathi.gov.in) |
| Unwanted telemarketing calls | TRAI DND app or 1909 |
| Threats or repeated harassment | Your nearest police station, with screenshots of the call log |
Before reporting, take screenshots of your call log showing the numbers, dates and times. This evidence makes your complaint much stronger.
For businesses: is your website being used for call bombing?
If your website or app has a "Request a call back", "Get OTP on call" or click-to-call feature, attackers may be using it to bomb other people. You pay for every one of those calls, and your number gets reported as spam. Protect your forms with these steps:
- Add a captcha before triggering any call or OTP.
- Set rate limits per phone number, per IP address and per device – for example, no more than 3 requests per number in 15 minutes.
- Add a cool-down timer on the resend button.
- Watch your reports for sudden spikes to the same numbers or number series, and block them.
- Use a provider whose panel shows clear delivery reports, so abuse is spotted the same day – not when the bill arrives.
Frequently asked questions
Can a call bomber hack my phone?
No. Just receiving calls cannot hack your phone. The real risk comes from calling back unknown numbers, installing apps a caller suggests, or sharing an OTP.
How long does a call bombing attack last?
Usually from a few minutes to an hour. Spam filters, Do Not Disturb with allowed contacts and a short spell of airplane mode are normally enough to get through it.
Can I find out who used a call bomber on me?
Not by yourself, because the calls come from many different numbers. If you file a complaint, the police can request records from operators and service providers.
Is a call bomber the same as an SMS bomber?
They work the same way. An SMS bomber floods your inbox with OTP messages, while a call bomber floods your phone with calls. Read What is an SMS Bomber? to learn more.
Run a website or app that sends OTPs or calls? Talk to our team – DigitalSMS4U provides DLT-compliant OTP SMS, voice and RCS with rate limits and live reports, so your service cannot be turned into a bomber.
