How do you know the email comes from that website? There are known cases of phishing mails being sent when people expect a legitimate mail.

If someone hacks my account and starts ordering stuff on bol it's not my problem but the company's so I don't sleep over it.

The company doesn't care either because fraud is just the cost of doing business- ease of ordering> security.

The website is

abc.com

the link in the email is abc.com

unless the product manager decided the link in the email is

track.monkey.exe/sus/path/spyware?c=behhdywbsncocjdb&b=ndbejsudndbd&k=uehwbehsysjendbdhjdodj

or something 2x–3x longer

The question was "How do you know the email comes from that website? "

And the answer was, I can find out if the email is from abc.com by looking at the link, which should also be abc.com

I don't click in "track.monkey.exe". I don't click tracking links. I pay a lot of money for my newsletter provider because I can turn off (most) tracking links.

The question was framed that way but in fact this conversation isn't about your personal resistance to a particular scam vector.

Many sites do offload 100% of their emailing to 3rd party trackers. Therefore nobody can use those sites without engaging in 3rd party tracking. Therefore these sites have created an environment favorable for this scam vector.

The link in the email is a mailchimp wrapped tracking link with a gibberish URL. What now

Or the email is rendered HTML, where the expected URL is used as the text for an anchor whose href is the malicious site.

Pro tip: Hover over the link an check the URL. Or look at the source.

I don't click the link. Simple.

Track someone else.

You do, but does the average user? Security's reliance on people's behaviour / knowledge / discipline should be minimal.