Since it's a bad practice to ask users to click on a URL within an email to verify their identity due to phishing concerns, what is the best way to ask a user that additional PII information is necessary?
The following example from Stripe.com is asking for an email address, and a subsequent URL to click on.
Aside from emailing the end user, what other channels are best for requesting this information?
If email is the only choice, what is the best approach to ensure that the user will indeed click on the link and proceed with the verification. Our goal is to limit abandoned carts in the event the user doesn't see or ignores this request.