If you’ve clicked a phishing link, don’t panic — clicking the link doesn’t automatically mean you’ve been hacked. What you do next matters.
🚨 Clicked a phishing link? Do this:
1. Close the page
Don’t enter any information, download anything, or click further links.
2. If you entered a password — change it immediately
Go directly to the company’s genuine website or app rather than using the link you clicked. Change the password and make sure two-factor authentication (2FA) is enabled.
3. If you entered bank or card details
Contact your bank immediately using the number on the back of your card or the bank’s official website. Tell them you may have entered your details into a phishing site.
4. If you downloaded or installed anything
Stop using the device for sensitive activities and run a full security scan with your security software. If you installed a suspicious application, don’t simply assume deleting it has removed everything.
5. Check your accounts
Look for:
* Unusual logins
* Password-change notifications
* New devices you don’t recognise
* Unexpected purchases or transactions
* Emails or messages you didn’t send
6. Report the phishing message
In the UK, suspicious emails can be forwarded to report@phishing.gov.uk. Suspicious texts can be forwarded to 7726 (SPAM).
7. Be alert for follow-up scams
Once scammers know you’ve interacted with a phishing message, you may receive convincing calls, texts or emails pretending to be your bank, Microsoft, PayPal or another company.
🔑 The most important thing
Clicked the link? → Don’t panic.
Entered a password? → Change it.
Entered financial details? → Contact your bank.
Downloaded something? → Scan the device.
