You guys didn't have official mobile app, or OTP (did you?).

Every time I received email notifications, i feel wary and anxious.

Is this message come from parallax?

Is it a phishing email?

Should I check email header?

Should I check whether the URL is legit when I clicked the button?

Your domain name also little bit funny and long "app.withparallax.com".

My humble suggestion is, can you provide a way to put "secret keyword" like Wise.com? Please google "secure communication code" of wise.com. It is very simple yet clever idea for email based communication.