Just this week I got an email from Amex to be on the lookout for scams, and the email itself had a "login" button right in the top.