Always always - type in and never trust links. Wouldn't it be cool if there was a personal sandbox where you could send link to test authority and credentials- verified and insured