The solution is: if it looks scammy, get on a different device altogether and use your normal login to the institution to access the issue through the normal channels instead of their "convenient link" through the sketchy service which may well be skimming your data even if they are under contract to your bank.
Unfortunately, a lot of the institutions' own interfaces suck so badly it's sorely tempting to use the quick link.