What should I do if I clicked a phishing link?
Quick answer: Closing the page quickly helps, but the next steps depend on whether you entered information or installed anything.
Closing the page quickly helps, but the next steps depend on whether you entered information or installed anything.
Close the page, do not enter information, update the device, and change exposed passwords from a trusted device.
Why one click is rarely the end of the world — or the end of the story
A phishing link wants one of two things: your credentials on a fake page, or a download that installs something. Merely landing on the page usually steals nothing by itself — the danger starts when you type, download, or approve a prompt.
What to do, step by step
- Close the tab. Do not use any 'support' number, chat, or button the page offers — that is the trap's second stage.
- Go to the real service by typing its address yourself or using its app, then check for alerts and change the password there.
- If you typed a password anywhere, change it from the real site and turn on two-factor authentication; treat that password as burned everywhere it was reused.
Pro tip: Report the message in your mail app before deleting it.
Ask AI about this tip
Send this tip to your favorite AI assistant for a plain-language walkthrough, follow-up questions, or help applying it to your device.
Was this helpful?