Sprint includes a manual with their new phones with a space for writing down your PIN number..

There's a Voice MailBox option to disable PIN number entry if you're calling from "your phone." Anyone that can spoof Caller ID can bypass this..

After you type in a new PIN number the Sprint lady reads it back to you..

When using pay-by-phone your CVV2 number also gets read back..