An unfamiliar link is not automatically malicious, but unexpected links deserve attention before you open them. Think about the context in which you received it and whether the request makes sense.
Look at the destination carefully. Pay attention to the actual domain rather than relying on a familiar brand name, logo or page design. Small differences in a domain can matter.
Be especially cautious when a link leads to a login page, payment page, download, account verification request or form asking for personal information.
Do not let urgency decide for you. If a message says your account will be closed, a payment will fail, a parcel will be returned or a reward will expire, verify the situation independently instead.
If you are unsure, open the organisation's official app or type its known website address yourself rather than following the supplied link.
If you already clicked the link, use Get Help. What happened after the click—such as entering a password, providing banking details or downloading a file—determines what you should do next.