Suggestions and bugs

Hi, I just received the cashback email for June, and it struck me as a very risky way to apply cashback because of the inherent risk of clicking email links, especially for money. It made me do several checks to make sure it was a legit email, as big 'claim x credit' buttons usually scream scams to me. Suggestion is: Change this to an onsite approval with an email that only notifies you of the availability, and clearly delineate that process so that newer users are aware you'll never send links in an email like that. Otherwise, an attacker could just spam these emails with masked emails that look real until someone clicks it without checking. This is a serious problem in my line of work so I'm hypersensitive to it.