Step 1: Do Not Enter Any Information

If the link opened a webpage that is asking for your username, password, credit card number, or any personal information — do not type anything. Close the page immediately.

Step 2: Close the Page and Disconnect from the Internet

Close the suspicious page or tab immediately. If you are concerned that something may have downloaded to your device, disconnecting from the internet can prevent malware from communicating with its source.

1. 1Close the suspicious tab or page.
2. 2On a phone: turn on Airplane Mode temporarily.
3. 3On a computer: disconnect from Wi-Fi or unplug the Ethernet cable.
4. 4This is a precaution — you can reconnect once you have run a security scan.

Step 3: Run a Security Scan

Run a malware scan on your device to check whether anything was downloaded.

1. 1On Windows: open Windows Security (search for it in the Start menu) → Virus & threat protection → Quick scan.
2. 2On Mac: Macs are less vulnerable to malware from links, but you can use Malwarebytes (free version available at malwarebytes.com) for a scan.
3. 3On iPhone or Android: mobile devices are generally well-protected against drive-by downloads from links. If you did not install anything, a scan is usually not necessary.

Step 4: Change Your Passwords If You Entered Any Information

If you entered a username, password, or any personal information on the suspicious page, change those passwords immediately.

1. 1Change the password for the account the page was pretending to be (your email, bank, Amazon, etc.).
2. 2If you use the same password on other accounts, change those too.
3. 3Enable two-factor authentication on the affected account if it is not already on.

Step 5: Check Your Accounts for Unauthorized Activity

If you entered any financial information, check your accounts for unauthorized transactions.

1. 1Log in to your bank and credit card accounts and review recent transactions.
2. 2If you see anything unfamiliar, call your bank immediately.
3. 3Consider placing a fraud alert on your credit report by contacting one of the three major credit bureaus (Equifax, Experian, or TransUnion).

Step 6: Report the Phishing Attempt

Reporting phishing helps protect others.

• If the link came in an email: forward it to reportphishing@apwg.org and to your email provider (in Gmail, click the three-dot menu and select Report phishing).
• If the link came in a text message: forward the text to 7726 (SPAM) — this is a free service that reports spam texts to your carrier.
• You can also report phishing to the FTC at reportfraud.ftc.gov.

What If You Think Your Device Is Infected?

Signs that something may have been installed on your device include: your browser redirects to unexpected websites, you see pop-up ads you did not see before, your computer is suddenly much slower, or programs you did not install appear.

• Run a full malware scan with Windows Security or Malwarebytes.
• Check your browser extensions for anything you did not install.
• If the problem persists, a professional can help remove the malware and secure your device.