What do I do if I clicked a phishing link?

Concerns & risks

You were trying to clear your inbox fast, but you clicked an email that looked like it came from a delivery company, typed your password into the page, and only then noticed the weird web address.

Fast action limits the harm.

Causes & evidence

If you shared info, change passwords and watch accounts. See phishing and multi-factor authentication.

What to do

1. Change that password and any reused ones.
2. Turn on multi-factor authentication.
3. Check account activity.
4. If financial info was shared, contact your bank. Visit IdentityTheft.gov if identity was stolen.

Common mistakes: Common mistakes: feeling embarrassed and doing nothing. Phishing pages are built to fool smart people. Change the password on the real site, not through the email link, and change it anywhere else you reused it. Sign out of other sessions if the service offers it, and check recovery email and phone numbers for changes. Turn on MFA so a stolen password alone won't work. If you entered card details, call the card issuer. Watch for follow-up scams, like someone calling to 'help' you recover.

Speed Man tip: Run a security scan on your device.

Wrap-up: Change passwords. Turn on MFA. Watch accounts.