I had an HSA years ago. They sent me an email today regarding my tax forms (for the year I’ve already filed my taxes for). The mail included their company logo as an attachment, but mis-named so that it’s not viewable. And when I went to the link in the email, I got a TLS error because their certificate had expired.

I’ve rarely been less confident about a legitimate email. Get your act together, WealthCare. Fintech companies don’t usually want to present themselves as amateurs.

Expired domain notice for secure.wealthcare.com