At least with an email you can hopefully verify the headers. A phone number is too easily spoofed these days and the end user has no real means of verification.