The sender identifies themselves as Zagrebačka banka, a state institution, a courier service, etc., attempting to deceive you into opening the link and entering your:
Make sure to verify each sender asking you to provide any of the abovementioned information in order to receive a payment.
Only access your on-line banking at www.zaba.hr, not through links sent to you via e-mail and third-party messages.
If you are expecting a payment, all you need to do it provide your (account number) and name and surname of account owner. Authorisation through a push-message or token is not necessary.