IIRC you can even spoof the URL, so the URL on screen is not what you will be directed to. It is a perfect ground for phishing attacks. PS: Skype and Teams share parts of the same XML message format, you can have some fun there too :)
[0] https://learn.microsoft.com/en-us/microsoftteams/platform/we...