Android just started doing a good job of blocking them one day. I didn't do anything.
I had tried Hiya and Jolly Roger Telephone Co, but neither was good enough to be worth the bugs and loss of privacy.
I had the problem intermittently for years, but it becamw awful (like 6+ spam calls a day) for two weeks before Google apparently fixed it.