The average layperson doesn't even know caller ID can be trivially spoofed.
Or they accept the push notification dialog on some random site and start getting "COMPUTER HACKED, CALL MICROSOFT AT FAKE NUMBER" notifications that look like they come from the OS.