Here is 90% of what you need to know… don’t click on any links ever.

In this situation, if you thought the DM was legit, what you could have done was asked for an email and then if you received it check to make sure it came from the same @ as the sender.

And then still don’t click any links.

For example, there was an account with 20k followers DM’ing people claiming to be from Bloomberg. But they couldn’t send you an email from a @bloomberg.com email because they were not really associate with them.