There are anti-spoofing requirements for carriers. The TRACED Act requires carriers to implement voice call authentication which should make spoofing caller IDs impossible. https://www.congress.gov/bill/116th-congress/senate-bill/151

Last time I checked, carriers have until June 2021 to implement it. https://arstechnica.com/tech-policy/2020/04/ajit-pai-follows...