All incidents
I clicked a suspicious link
You clicked a link in a message or email and now you're not sure if something happened. A suspicious link may lead to a fake login page, a malicious download, a scam, or another form of fraud. Clicking a link on its own does not automatically mean your device has been hacked — what matters is what you did after the page loaded.
Do this now
- Close the page or app without entering any information, if you haven't already.
- If you typed in a password, go to that account directly (not through the link) and change the password immediately.
- If you entered banking or card details, contact your bank through their official app, website or phone number to flag it.
- If you downloaded and opened a file, run a scan with your device's security software.
Then do this
- Turn on multi-factor authentication (MFA) on the affected account if it isn't already on.
- Check the account's recent activity or login history for anything unfamiliar.
- Update your device and browser to the latest version.
Check these things
- Did the page ask for a password, PIN, or one-time code?
- Did you download or open any file from the link?
- Does the account show logins from unfamiliar locations or devices?
Don't do this
- Don't click the same link again to 'check' it.
- Don't enter more information anywhere to try to fix it.
- Don't assume nothing happened just because the page looked normal.
When should I get help?
- Contact your bank if you entered any financial information.
- Contact the service provider if you entered a password for that account.
- Speak to an IT professional if the device is behaving unusually after opening a download.