One of the reasons vishing can be quite convincing is that they typically use spoofed caller ID numbers that look legitimate.