An aspect includes verifying a telephone caller origin carried out at a security application. The verifying includes activating a security process during an active telephone call to a user received at a first call identifier, accessing registered user service providers to obtain contact details of a registered service provider purporting to be the origin of the active telephone call, and sending a query to the obtained contact details of the registered service provider. The query includes the first call identifier. The verifying also includes receiving a returned query result confirming or denying that the telephone call is from the registered service provider.