A piece of advice they don't mention: use an alternate number for registering websites and/or hide your WHOIS data.

I have a Google Voice # I used only for domain registration. I let the WHOIS guard expire, and I now get regular spam calls to that number daily.

I'm sure they source the numbers from a lot of places, but from what I've experienced and read this is a big source of them.