I'm not sure if it is possible or more to the point if you'd want it.

Think how easy it is to fake an email with the senders details and have a different reply address.

Also, how easy is it to sniff packets.

I would suggest an alternative method, maybe a login page on a website with various security questions for them to get their password.