Basically, the malicious link pops up through one of your friends account on Messenger to fake legitimacy. And it is quite impossible to just ignore that message, given that it is from a known user.