BBC has a stry about methods of reading bank PINs and password without opening their cover, using heavy light r similar techniques. It looks that it's much easier than expected.
Sending PINs by mail is not a good idea (you don't know who has access to the envelope), but widely used. Fortuantely, more and more banks allow you to choose your own PIN using electronic communication (encrypted).