I think it will always be possible to spoof because carriers have to allow forwarded and transferred calls to pass originating CID. So nice for congress, but I expect this to hit some snags when people consider how to implement it. Instead of the knee jerk reaction to ban spoofed CID they should legislate a method to authenticate -valid- CID. This is like trying to ban spam, when a better solution is to validate legitimate senders.