Loading Cyber Conduct…
Please wait while the page loads.
Loading Cyber Conduct…
Please wait while the page loads.
Get Help
You clicked a link in a message or email and now you're not sure if something happened. A suspicious link may lead to a fake login page, a malicious download, a scam, or another form of fraud. Clicking a link on its own does not automatically mean your device has been hacked — what matters is what you did after the page loaded.
What to do now
If you clicked a suspicious link, don't panic. Close the page and work out what happened next: entering a password, banking details, an OTP, or downloading a file changes what you should do now.
Clicking a suspicious link does not automatically mean your device or account has been hacked. What matters is what happened after the page opened.
Close it. Don't return to the link to test it. If you entered nothing and downloaded nothing, stay alert for follow-up messages.
Treat that password as compromised. Go directly to the real service, change it, and turn on MFA.
Password may have been stolen →Contact your bank immediately through its official app, website, or trusted number. Don't use contact details from the suspicious message.
Banking scam help →Treat the account as potentially exposed. Secure it directly, review recent activity, and contact the provider if anything looks unfamiliar.
Check unknown account activity →Don't open it again. Run a security scan and watch for unusual device behaviour.
Computer may be infected →Look for unfamiliar logins, messages, transactions, password changes, or linked devices and secure the affected account.
Secure the account →If you still have the SMS, email, WhatsApp message, or other message containing the link, use the Suspicious Message Check to look for common warning signs. Don't paste passwords, OTPs, PINs, API keys, or other secrets into the checker.
Check the message →Your situation may involve more than one issue. These related guides can help you work through the next step.