[hannofcart]

I don't think the scammers are using sequential iteration over numbers. I suppose it's more efficient to just call numbers exposed in a data breach.

Your suggestion won't help circumvent that. I think.

[robust-cactus]

Fair, but you could throw away numbers more easily in this situation due to data breaches. You could also "update trusted parties" with a new improved scheme overall.