I don't think the scammers are using sequential iteration over numbers. I suppose it's more efficient to just call numbers exposed in a data breach.

Your suggestion won't help circumvent that. I think.