I'm thinking of a secondary alarm anytime you get an email that may be a password recovery.

Something like SpamBayes put trained for account related emails from the popular services and banks.