Set your Tor Browser security level to "Safer" or "Safest" to disable Javascript, which is often used in deanonymization attacks.

Never trust a single source for a link. Cross-reference the onion address across multiple independent directories. If the addresses match across three or more unrelated, highly rated platforms, the likelihood of it being a phishing link drops significantly. Utilize Onion Service Mirrors