"Who hasn't had an email from their banks with a "click here" rectangle for customers to log in and learn about some new trick with their account."
Me for some time now. I reported a number of these to their phishing report helpline. I eventually emailed that or some similar address than in the continued absence of any reply I'd discontinue the email address set up specifically for said bank. No reply so I gave them the chop. They don't seem to have noticed their emails bouncing.