Prefer listening? Have this guide read aloud.

I clicked a link

Clicking a suspicious link doesn't automatically mean your device has been compromised. What matters is what happened next. If you entered information, downloaded something or allowed someone access, you may need to act promptly.

What happened next?

Just opening a webpage is different from entering information or giving someone access. If you did any of the following, take prompt action. Don't panic, but don't put it off.

You only opened a webpage: Close it. Don't enter information or install anything. Keep your browser and device updated. If nothing else happened, urgent action is not usually needed.
You entered a password: Change it promptly through the real website or app. Change it anywhere else you reused it. Turn on two-step verification, which adds another check when signing in.
You entered banking details or a security code: Contact your bank immediately using its official app or a number you know is genuine. If the code was for another account, secure that account too.
You downloaded or installed something: Avoid banking or other sensitive activities on that device until you know it is safe. Ask someone you trust to help you find reliable technical support.
You allowed someone to control your device: Act promptly. Follow Someone accessed my device, including advice about disconnecting from the internet.

Tell someone you trust. There's no shame in asking for help, and you don't have to work through the next steps alone.

Was this guide helpful?

We welcome suggestions, corrections and ideas for making this guide clearer.

Send feedback about this guide

This opens your email app. Please avoid including passwords, bank details or other sensitive information.