I've never done it before, but on a forum thread, if the member is set up to allow private emails, you can click the Email button on their message, and it creates a form that looks like a normal forum thread response, but says, "this won't be posted on the site."
Thanks, Sean Ewington CodeProject