How is a spammer going to figure out phone numbers of people on my list from social media? I don't know about you, but I don't have my Facebook friends publicly viewable.
And that's an awful lot of work just to cold-call someone to try to sell them insurance or whatever.
This doesn't seem like a reliable way of running a business: just hoping that you can exploit a bug in Facebook (which will surely be fixed before long) so you can grab people's friends, try to figure out their phone numbers, then spoof them, then cold-call them trying to sell them crap insurance.
I'm sorry, this just sounds far-fetched to me. History seems to have shown that when hurdles are just a little too high, the spammers just don't bother.
And that's an awful lot of work just to cold-call someone to try to sell them insurance or whatever.