I get these in my junk email account constantly... The same email I use when I don't want to give out an email, but don't have much of a choice. My financials are handled through a secured email server that only my banking and lenders know of, and they have no clue of the junk email.
Either way, if something seems amiss or theirs some request for me to log in someplace, I always use the link I already have bookmarked.
Amex PRG (NPSL), Amex Blue Cash ($8K), Amex Simply Cash+ ($4K), Discover ($20.7K), Cap 1 Union Plus MC ($2500), Chase FU Visa Sig ($12K), Chase F Visa Sig ($8.3K), Chase CSP Visa Sig($6.5K), FCB/Elan Rewards Visa Sig($10K), Buckle ($1.3K), BofA AAA Rewards ($67.6K), Paypal credit ($7.8K), BBVA Clearpoints ($7.5K), Cap 1 Savor ($10K)