Asset 19
Don’t Panic! Here’s What to Do If You Clicked on A Phishing Link
It's Monday and you’re working through your morning emails when a message pops up that looks like it’s from your company’s IT department. The subject line reads: “Password Expiration Notice – Action Required.” The email looks legitimate, complete with your company logo and formatting. Without thinking twice, you click the link to “reset your password.” The page looks real, so you enter your login credentials only to realize later it wasn’t your IT team at all, but a phishing scam designed to steal your information. Now what?
If you’ve accidentally clicked on a suspicious link, don’t panic — but act fast. Here are the four immediate steps you should take:
1. Disconnect from the Internet
Unplug your network cable or turn off Wi-Fi right away. This stops potential malware from spreading or communicating with external servers.
2. Run a Full Security Scan
Use your antivirus or endpoint protection software to perform a full system scan. If it finds anything malicious, follow the prompts to quarantine or remove the threat.
3. Change Your Passwords
If you entered any login information after clicking the link, change those passwords immediately starting with email, banking, and work accounts. Enable multi-factor authentication (MFA) for extra protection.
4. Report It to IT or Security
Notify your IT department or security provider right away. They can assess the risk, check for further compromise, and warn others to avoid similar attacks.
Bonus Tip: Keep an eye on your accounts and inbox for unusual activity over the next few weeks. Quick action can often prevent serious damage after a phishing or malware attempt. Think you may be at risk? We can help.