What should you do after clicking a phishing link?
Short answer
Disconnect your device from the internet immediately if you downloaded a file or suspect malware. If you submitted passwords or sensitive information on the page, change your account credentials right away from a separate, secure device and enable multi-factor authentication. Run a full scan using updated antivirus software. If you entered payment information, contact your bank immediately to flag fraudulent charges and monitor your statements.
The details
Clicking a link does not always compromise a system on its own, but scammers design these destinations to harvest credentials or execute malicious code. If you reached a spoofed website and typed in your username, password, or credit card details, attackers capture that data immediately. You must reset that password and any matching credentials on other accounts, because attackers test stolen passwords across multiple platforms. Turn on multi-factor authentication to block unauthorized access even if attackers have your current password.
If the link initiated a file download, do not open the file. Keep the device isolated from your home or office network while running a security scan. According to the Federal Trade Commission, maintaining updated security software and automated operating system updates provides critical protection against emerging threats. Finally, make sure to report the phishing message to your organization's security team or mail provider so they can block the sender and protect others.
What to do
- Disconnect your computer or mobile phone from Wi-Fi and wired networks immediately.
- Reset your account password from a different, secure device if you entered login details.
- Enable multi-factor authentication on the affected account to block unauthorized access attempts.
- Notify your bank or credit card issuer immediately if financial details were exposed.
- Run a full scan with your updated antivirus or endpoint security software.
- Report the phishing email or text to your IT administrator and service provider.
Useful next reads and tools
- Suspicious URL Analyzer · tool
Terms explained
- Phishing
- Phishing is a fraudulent message, usually email, that impersonates a trusted sender to trick people into revealing credentials, paying money or running malware.
- HTTPS and TLS
- HTTPS is HTTP protected by TLS encryption, which keeps data between a browser and a website private and tamper-resistant and confirms the site controls its domain.
- Malware
- Malware is any software designed to harm, spy on or gain unauthorized control of a device, network or account.
- Multi-factor authentication
- Multi-factor authentication (MFA) requires two or more kinds of proof to sign in, such as a password plus an app prompt, security key or biometric unlock of a passkey.
Sources
Related questions
- How can I tell if an email is a phishing attempt?
- Where do I report a phishing email or scam text?
- What should I do if I clicked a phishing link?
- How do I know if a package delivery text is a scam?
- What is smishing and how is it different from phishing?
- How do I protect myself from phone call scams (vishing)?