Spoofing CallerID is now trivial. Go sign up, via the web, for a trial VoIP account at one of the SIP wholesalers, and set up Asterisk. Pick whatever outgoing CallerID you want.
So, from now on, make sure never to build a system that uses the incoming CallerID as an authentication token. And, don’t believe what you see on your CallerID.