I Clicked a Suspicious Link. What Should I Do?

The quick answer

Close the suspicious page and don't interact with it further. Then work out what happened: viewing a page, typing a password, opening a download, or approving a remote session carry different risks.

If you only opened the page

Modern updated browsers have protections, and simply visiting a page does not automatically mean an attacker gained control. Close it, check your browser's download list, and update the browser if needed. Don't call phone numbers displayed in a pop-up warning.

If you typed a password

1. From a trusted device, go directly to the real service by typing its address or opening its app.
2. Change the exposed password immediately, especially if reused elsewhere.
3. Review recent sign-ins and security settings.
4. Enable multifactor authentication and sign out unknown sessions where the service offers that option.

If you entered bank or card information, call the financial institution using the number on your card or official app, not one from the suspicious page.

If something downloaded

Do not run an unexpected executable, installer, or document macro. Check the browser's downloads list; remove untrusted downloads without opening them. If the file was executed, use trusted security software and consider professional assessment before continuing normal sensitive work.

If you granted remote control

Disconnect the computer from the internet if safe to do so, stop using it for banking or password changes, and get trusted help checking for remote tools, persistence, and account exposure. Merely closing a remote-control window may not fully revoke unattended access.

Keep the evidence without spreading the risk

Note the sender, time, and suspicious address, but don't forward dangerous links to friends. You can report phishing messages to the service or organization impersonated. The best next step depends on exactly what you did—not how frightening the page looked.