See my edit - apparently I was wrong. My credit card companies never put a link on security alerts, and they’ve said they never will, so that customers know alerts with links are bogus. They always say to call the number on the card or login to your account, without providing a number or link. Discover must work differently.