Can not this be done with spammers as well? I could pretent to be Microsoft or a smaller company?

I think all the countermeasure and spam prevent techniques for phone spam can be taken from everything we learned regarding email spam.