Or, as another poster suggested, competent governments and corporations will use their actual domain name for official communication.
There's no good reason any business should be able to contact me without whoever is calling cryptographically proving they're that business and my phone showing the name and logo from a copy or mirror of an official database.
It should just be a standard part of business registration processes.
Put in the hierarchical angle, and we're kind of back at domain names.
Quite literally if the requirement was "your domain name will match your company registration in your jurisdiction" then that would help a lot.
Over a few years I burned that approach into my parents. It was tough, but worth it.