Received a suspicious text claiming to be from my bank about a 'security upgrade'—should I call them directly or use the app?

I got a text message this morning that said my bank was doing a "mandatory security upgrade" and that I needed to confirm my identity by clicking a link. The message looked pretty official, with my bank's logo and everything, but the link URL seemed a bit weird and didn't exactly match the bank's normal website. I haven't clicked on the link yet because it felt off, but I'm worried it could be a phishing attempt. My bank's app is installed on my phone, and I was thinking maybe I should check for notifications or messages there instead of using the text link. I also considered calling the bank's customer service number directly, but I’m not sure if that’s the best approach. Has anyone else gotten messages like this? How do you usually verify if these kinds of texts are legit? Is it safer to use the official app or to call the bank directly? Would love to hear what worked for you!