You can hover the link or image with your mouse and check the address. It should end with .gov as in the following https://www.ssa.gov/myaccount.
What is phishing, sorry to ask?
It's a practice where you use techniques to fraud a person.