every financial company should make it practice to say "do not ever click links in our emails, go to our official website and login to your account"