Fake messages claiming an Apple ID has been locked or a payment has failed often create urgency, pushing recipients to click a link before thinking it through.
Legitimate Apple communications never ask for a full password or verification code by email or text, which is one of the clearest signals of a scam attempt.
Checking account status directly through the Settings app or appleid.apple.com, rather than clicking a link in a message, avoids the risk entirely.