You need to adjust the microflow DeepLinkHome. When a pendingLink has been found you have the hitcount available for that pending link. Create an exclusive split that checks the hitcount and then either execute the pendinglink or show the message that the link has expired.
On second thought this will not work. The hitcount is for the deeplink and not the pending link. The problem is on how to retrieve the URL the user used to access the application. I have to think about that one.
[EDIT2] The only sollution I see is to adept the StartDeeplinkJava. If you receive parameters then it means that somebody tried to use a deeplink. You could throw the deeplink expired error from the customized Java code.