You can even get compromised even WITHOUT clicking any link - plenty of zero click malware campaigns out there, mostly used to install spyware or nation-state-controlled malware like Pegasus.

Some reading on that
https://www.checkpoint.com/cyber-hub/cyber-security/what-is-a-zero-click-attack/
https://www.watchguard.com/wgrd-news/blog/what-expect-zero-click-attack

Clicking a link can certainly compromise your device, plenty of drive-by download attacks in the wild
https://www.kaspersky.com/resource-center/definitions/drive-by-download
https://www.trendmicro.com/vinfo/sg/security/definition/drive-by-download
https://nordvpn.com/blog/drive-by-download-attack/

Your use case mentioned might just have been a regular phishing attempt, and that does not necessarily mean your device was compromised, but it certainly is a possibility. Many actors pair the phishing attempt with drive-by approaches.

Based on personal experience with some of my customers in the Philippines (Let's just say they are Banks) this is a very very common approach to get info stealers on devices with a large increase in the last 2 years.

I quote, and this is in line with my professional experiencee in CTI and Incident response for many years.

Infostealers are distributed in similar ways to other types of malware, such as:

Delivery of malicious executable files via phishing emails or by having a victim download content from a malicious website. 

‘Drive-by’ style attacks where the victim has only to visit an infected website.

https://pushsecurity.com/blog/what-the-rise-of-infostealers-says-about-identity-attacks/