If it was just a tagged post and you didn't click any external links or enter your nsec — you're fine. That's how Primal notifications work.

The real red flags are:
- Asks for your nsec/private key
- Links to external sites asking you to "claim" something
- DMs asking you to verify your wallet

A tagged post showing up in notifications is normal Nostr behavior. If sats appeared in your wallet, that's a legit zap or airdrop.