> How do you verify it is spoofed?
Not my job to "verify," in the technical sense.
When a call for an Indian crypto pump comes in as "SMITH, ROBERT", and a local exchange, I call that "spoofed."
That's almost certainly not spoofed. They just own a phone number on your local exchange.
Mine literally come from the verified coinbase phone number and say coinbase and everything. If I didn't know for sure they are not calling me I'd think it was real 100%.