In fairness HSBC calls from known numbers (granted, you may not recognise it the first time, but you can look it up then save it) and publishes numbers where you can call them [1]
This doesn't help when it's so common to spoof caller-id. The telco industry has blown any trust we can put in this information.
[I just learned that the FCC is considering not allowing calls made outside the US to be spoofed as numbers originating inside the US. I thought that was the whole point behind STIR/SHAKEN, silly me].
[1] https://www.hsbc.co.uk/help/security-centre/report-a-problem...