I learned the hard way to never click an online link to a financial website.
Always go to a financial site through the URL you know to be correct.
I lucked out and figured out my mistake in time.
Same here - any such site I use is already saved as a link.
And even when I get an email from one, I doublecheck the email address it came from and the URLs it wants me to click on.