Clicking a suspicious link does not always mean an account has been compromised, but it is important to act carefully.
If you did not enter information
- Close the page.
- Do not download or install anything.
- Update your browser and device.
- Run the device’s built-in security scan when available.
If you entered a password
- Go directly to the real website or app.
- Change the password immediately.
- Change it anywhere else you reused it.
- Turn on two-step verification.
- Review recent sign-ins and account activity.
If you shared financial information
Contact the bank or card issuer using the number printed on the card or an official statement. Explain exactly what happened and follow its fraud instructions.
Do not trust anyone who contacts you unexpectedly and offers to “clean” the device or recover money for a fee.