He pretended that Taobao customer service said that the shopping payment was unsuccessful and asked me to send him a link when I gave him a refund.

It is safe. Before you enter through the connection he gave you, the software intercepted your account information through a series of programs, including your account password at that time (only the relevant information of the user at that time was intercepted, and he would not intercept the updated information). Now, after the change, as long as you don't click that connection, the other party won't know your password. Friends hope to help you.