As a general rule of precaution, don’t follow links in the email. Instead go to the website directly, maybe from a private or incognito instance, and reset it directly. If the email is valid, you’re doing the same thing and if it wasn’t you aren’t drawing attention to anyone else.