We've only sent one mass email (I don't believe it had a link in it)
3) Do NOT EVER click a link in an email, or hit reply, and provide any private information to what you think is a request from your bank or financial institution. It isn't. It's a scam.
Ahem. OK, you didn't give a login link, just a URL to a blog (which I still had trouble believing was actually associated with Tradehill, because I'd never seen it before). However as pointed out, training customers to click on URL's in emails sent by a financial institution is irresponsible.
Much better would be to show me that message after I logged into the site.