Read the law. Spoofing is legal, using it to defraud the public is not; the fact that criminals who cannot be caught use the service to defraud people does not make it (spoofing) illegal, it just makes the clause in the law that says it is illegal to use spoofing to scam or defraud the public a ridiculous statement. When bad people hide behind a number they are not actually calling from, how are they going to be caught? The FCC would have to track down the number that called you on a specific date and time by subpoenaing records from every spoofing company available in order to find the culprit and charge them with unlawful use.