It's a technologically simple way to change the caller ID information encoded into an Internet call, allowing a caller to pretend to be someone they're not.
In fact, it's capable of operating without an internet connection at all, since it relies on algorithmically generated keys, similar to a secure ID token.