Untrusted / unauthenticated does not mean not traceable. You don't need an international agreement to tell companies in your country "you're responsible for not forwarding spam calls, but you also don't have to accept calls from peers with bad spam ratio". Telcos know where the spam comes from either directly or indirectly. They just don't have a good enough incentive to drop partners.