Honestly speaking, the telegram has now become the den of hackers and scammers that even a chat from strangers is very suspicious that needs to be extremely careful and cautious. Clicking on links sent to your dm should be avoided especially when you are recieving it from an unknown account that you have never chatted in the past. Always remember that admin or mods do not dm first on telegram channels or groups so if anyone dm you claiming what they are not, you have every right to report and block them right the way. Your safety should be your concern so as to protect yourself from scammers and hackers. Do not chat with strangers as they may lure you into clicking link sent to you all in the name of wanting to help you resolve an issues in diguse to be admins and mods.
This is not new and it happens long time ago. This is also the reason why I don't like to use that platform since anyone can create the same name with famous people that's why lots of people get exploited and scammed especially if they are new then didn't know that such activities happened there.
That's why its really good to verify always who are those people reaching you out since once you post something in the community you are following for sure that you receive a lot of message from scammers so better not to entertain any of those. Then also remember the word that admin on groups will never send you pm first usually the people do that are frauds.
You are right and one thing I have been saying to people is that whenever they receive a message on telegram from an unknown person, they should first check the group they share in common and do some verification on the account that messaged them to confirm the authenticity of such account because no admin or mod PM's first because it is against the rules for a mod or admin on telegram to PM a random member message but rather the member should PM first if they have any complaints but scammers just take advantage of any little complaints on telegram groups to start flooding the complainer with messages with ill intentions.
It should be an instant block if any one PM's you claiming to be a mod and demanding you to click any link sent or they intend to send you for their ill intentions of getting your account hacked or stealing sensitive information from your device.