It's shocking that anyone can spoof the number of, say, my bank. At least large institutions should have authentication.