Use the real service's official website or app rather than returning through the suspicious link.
Change the password immediately and review active sessions, recovery methods, and connected applications.
Enable multi-factor authentication if available.
If you entered banking or payment information, contact the bank or provider through its official channel as well.