Hey, can referral link be falsified in to a malicious thing? My friend got a referral link and it looks sketchy