Caller ID has been trivial to spoof for a very long time. Anyone can make any call seem like it's coming from any number. It's not secure or encrypted or anything else. Just because the number that popped up on your phone is associated with Chase, doesn't mean the call actually came from Chase. This is common knowledge.