This form of communication encourages behaviours which are relied upon by phishing campaigns. If you *must* have your comms in a seperate system, at least make the process "sign into your online banking at https://skiptons.co.uk/ and then click messages on the left"