You are missing the point. He (hopefully) won't trust the callerID to be the bank, but he will trust a "random" callerID to not be his bank/important.