I clicked: what now?
â›”
The golden rule
If a message sends you to a link, do not keep browsing from that link. Close it, open the official website or app yourself, and check your account there.
I only opened the message
Do not click or download anything. Close it if you are unsure.
Do not click or download anything. Close it if you are unsure.
I clicked the link
Close the page. If you entered nothing and installed nothing, risk is usually more limited, but watch for downloads or abnormal behaviour.
Close the page. If you entered nothing and installed nothing, risk is usually more limited, but watch for downloads or abnormal behaviour.
I gave my password
Change it immediately on the real service and anywhere else you reused it. Enable two-factor authentication where available.
Change it immediately on the real service and anywhere else you reused it. Enable two-factor authentication where available.
I gave card details or approved a payment
Contact your bank immediately using an official number and block the card/payment route if needed. Keep evidence.
Contact your bank immediately using an official number and block the card/payment route if needed. Keep evidence.
I installed a file or app
If the device behaves abnormally, disconnect it from the network, run security protections and seek official help. Do not leave remote access enabled for a stranger.
If the device behaves abnormally, disconnect it from the network, run security protections and seek official help. Do not leave remote access enabled for a stranger.
I lost money
Keep messages, URLs, receipts and screenshots. Contact your bank and your country’s official police/cybercrime reporting service.
Keep messages, URLs, receipts and screenshots. Contact your bank and your country’s official police/cybercrime reporting service.