The signaling data includes the real origin. CID is convenience data provided by the originator. The telcos wouldn’t use it for anything important, like billing.
Anyone can set up a bunch Asterisk or Freeswitch servers anywhere in the world and use VOIP. How does it know where the "real" origin is.