Spoofing a phone number is incredibly easy and caller ID shouldn't be a form of verification. Call the main 800 number for your insurance company. Ask them if it's legit.