This phishing link always uses the same pattern, smart users recognize the pattern

[Harry1986-2]

The phishing link should have the possibility to change so it is not always ?rid=XXXXXXX, but could be ?value=XXXXX-XXXXXXX-XXXXXXX or /something&action=XXXXXXX-XXXXXXXXXXX-XXXXXXXXX
where &action=XXXXXXX-XXXXXXXXXXX-XXXXXXXXX

[raginx]

Definitely a great improvement! At the moment I'm not sure what the best way to implement this would be, but I'll look into the options we have.