Phishing Protection
What to Do After Clicking a Phishing Link
Clicking a phishing link does not automatically mean your device or account was compromised. Close the page, avoid downloading anything, change credentials if entered, enable MFA, and contact affected institutions through official channels.
What happens when I click a phishing link?
A link may open a fake login page, redirect you to an advertisement, download malware, or simply fail. The risk increases if you entered credentials, downloaded a file, installed software, or approved a sign-in request.
- Clicked only
- Entered credentials
- Downloaded a file
- Approved access
What should I do immediately?
Close the page, do not interact further, and avoid entering more information. If you downloaded or installed something, disconnect from sensitive services and follow your device's normal security process.
- Close the page.
- Do not download anything.
- Do not enter more data.
What information must stay private?
Never share passwords, authentication codes, recovery codes, card numbers, or bank details with a person claiming to help after the click.
Change credentials if you entered them
Open the legitimate service directly and change the password. Change it everywhere it was reused, then sign out other sessions.
- Use the official site.
- Change reused passwords.
- End unknown sessions.
Secure the device and account
Update the operating system and browser, run your normal security scan, review extensions and downloads, and enable MFA on affected accounts.
- Install updates.
- Review downloads.
- Enable MFA.
Contact affected institutions
Contact your bank or card issuer through an official number if financial details were entered. Report the phishing message to the platform or provider.
- Contact the bank quickly.
- Report phishing.
- Monitor transactions.
Keep exposure checks in perspective
A 4safer result may provide context about a known email exposure, but it cannot determine whether the link installed malware or whether credentials were captured. A negative result is not a guarantee.
Frequently asked questions
Am I hacked if I only clicked the link?
Not necessarily. Risk depends on what the page did and whether you entered, downloaded, installed, or approved anything.
Should I change my password after clicking?
Change it immediately if you entered it or if the password was reused and may be exposed.
Should I contact my bank?
Yes, if you entered financial information, approved a transaction, or see suspicious activity.
Sources
This guide is reviewed against official guidance. External pages may be updated by their respective owners.