A suspicious link does not need to be opened to be investigated.
On many devices, hovering over a link or long-pressing it can reveal the destination. Look at the actual domain rather than the text displayed in the message.
Be particularly cautious with links containing unfamiliar domains, misspellings or extra words designed to resemble a legitimate organisation.
For sensitive services, the safest approach is often not to use the link at all.
Open the official website yourself or use the organisation's existing application.
A link that looks convincing is not evidence that it is safe.