I know, but anything out of band won't really work, because that can be phished even more, plus as described above, there's no real need for it either (IMHO).