If you entered banking or card information into a suspicious website, act promptly even if no money has been taken.
Contact your bank using the number on your bank card, the official banking app, or the bank's official website. Do not use contact details supplied by the suspicious message or website.
Tell the bank exactly what information you entered. This could include an account number, card number, CVV, online-banking password, PIN, or one-time password.
Follow the bank's instructions about blocking a card, changing credentials, monitoring transactions, or securing the account.
Check recent transactions and keep watching the account for activity you do not recognise.
If you also entered a password that you use elsewhere, change that password on the real services immediately.
Keep screenshots, messages, website addresses, transaction records, and other evidence in case you need them later.