[ivmi]

A mailed letter would work. Plenty of other orgs do that as the only way to communicate your PIN to you.

[jonnytran]

It's interesting that this isn't one of the three traditional ways to authenticate, but it's obviously effective to some degree. Maybe it suggests a new mode of authenticating: some place where you are.