You tapped a link in a text or email, and now something feels wrong. Start by closing the page. What you did after opening it determines which steps matter most.
Quick answer: Stop interacting with the message. If you shared a password or code, protect that account through its official app or website. If you shared payment details, contact the provider immediately. If you installed software or allowed remote access, use another trusted device for sensitive accounts.
1. You only opened the page
Close the tab without pressing buttons inside the page. Do not call a number shown in a warning or install a suggested “fix.” Opening a page alone does not establish that your account was taken over, but do not assume the page was harmless. Check whether anything downloaded, whether you allowed notifications, and whether you entered information.
Update your browser and device. If you suspect a harmful download, update your security software and run a scan. On Windows, use our Windows Security scanning guide. Repeated browser alerts may need a separate check: fake virus warning pop-ups.
2. You typed a password or shared a sign-in code
Open the genuine service yourself, using its official app or a saved bookmark. Change the exposed password and any other accounts where you reused it. If the device may be compromised, do this from another trusted device.
Check recent account activity and sign out unfamiliar sessions. Review recovery details and enable multifactor authentication. A shared sign-in code can allow access even when the password stays private. Google provides instructions to review and sign out devices and strengthen account security. If you cannot sign in, use the provider’s official recovery process.
3. You entered card details or sent money
Call your bank, card issuer, or payment service immediately using the number on your card or its official app. Explain what happened, including any small “delivery fee.” Ask about securing the account and stopping or reversing the payment. Recovery is not guaranteed.
4. You installed something or allowed remote access
End the remote session and disconnect the affected device from Wi-Fi and Ethernet. Use a separate trusted device to secure sensitive accounts. Get trusted help checking the affected device before using it for banking or email again. A clean scan alone does not prove that remote-access changes were undone.
5. You shared identity information
Use IdentityTheft.gov for a plan suited to what you shared. If your Social Security number was exposed, review the FTC’s credit freeze and fraud alert guidance.
Think someone actually accessed your email? Follow our 10-step hacked-email recovery checklist to inspect inbox rules, forwarding, connected apps and deleted messages after resetting your password.
Keep a record and report it
Save the original message and relevant transaction details without reopening the suspicious link. Report suspected fraud at ReportFraud.ftc.gov. Be cautious of follow-up offers to recover money for an upfront fee.
Next time: pause and check independently
Reach the organization through a route you already trust. Read How to Spot a Scam and Unexpected Package Delivery Text? for examples you can check before responding.
Sources
FTC: Recognize and Avoid Phishing · FTC: What to Do if You Were Scammed · Google account guidance linked above.
Leave a Reply