@0xabad1dea My bank did something like this, even asking me to log in to my account using the button in the email. Customer support didn't see the problem as they "could confirm" the email in my inbox was real. More or less wrote their head lawyer that I thought they were complicit in identity theft. Don't think I ever got a reply, but their policy changed after that.
E
economistatwork@sciences.social
@economistatwork@sciences.social