Clicked a Phishing Link? What to Do Now

It happens to everyone eventually. You clicked a link, and now you're not sure what you've given away. Don't panic, and don't ignore it either. What to do depends on how far you got.

If you only clicked the link

Opening a phishing page on its own is rarely a problem on an up-to-date computer or phone. Close the page. As long as you didn't type anything in or download anything, you're almost certainly fine.

Make sure you're up to date Install any waiting updates for Windows or macOS, your browser and your phone.
Run a scan On Windows, open Windows Security, choose Virus & threat protection and run a Quick scan.

If you entered a password

Assume the scammer has it. They usually try it within minutes, so act now.

Change that password Go to the real website yourself, not through the email, and change it to a new one you haven't used before.
Change it anywhere else you used it Scammers try the same email and password on other sites.
Sign out other sessions In Microsoft 365 or Outlook.com, go to mysignins.microsoft.com and choose Sign out everywhere. In Google, go to Manage your Google Account, then Security, then Your devices.
Turn on two-factor authentication If it wasn't on already.
Check for rules and forwarding If it was your email password, look for mailbox rules or forwarding you didn't set up. See secure your email account.

Entered a code or approved a sign-in request? Some fake pages ask for your two-factor code too and pass it straight on. Change your password and sign out everywhere, as above, even if you have two-factor authentication.

If you entered card or bank details

Call your bank now Use the number on the back of your card. They can cancel the card and watch for payments.
Change your online banking password
Be ready for a follow-up call Scammers often ring pretending to be the bank's fraud team, already knowing some of your details. Never move money or read out a code on a call you didn't make.

If you downloaded or opened a file

Disconnect from the internet Turn off Wi-Fi or unplug the network cable.
Don't log in to anything on that computer Change important passwords from another device instead.
Get it checked Some files install software that records what you type or lets someone in later, and a quick scan may not find it. We can check and clean it for you. More on virus removal.

Afterwards

Tell people At work, tell whoever looks after your IT. If your email was taken over, warn your contacts, because scammers often send phishing from the hacked account next.
Report it To the National Cyber Security Centre.

Not sure what to do? Call us on 03 548-2220 and we'll talk you through it.