As a rule, never click on links sent to you by strangers. Even links sent by friends and family should be scrutinised to ensure that they're legitimate.

I'd suggest that everybody invests in an authenticator as an additional layer of protection. They're pretty useful.