Know the limits: Scrammer cannot inspect your device or determine what a link did.If someone is in immediate physical danger, call 911.

Scam Guides · Link or attachment

What to do after clicking a suspicious link

Clicking a link does not tell you by itself what happened. Close the page, do not enter anything else, and choose the next steps based on whether you entered information, downloaded a file, paid, or allowed device access.

Start with these steps

  1. Close the page and stop responding. Do not continue signing in, paying, or following instructions from the message.
  2. Write down what happened privately. Note whether you only opened the page or also entered a password, card details, identity information, or a verification code.
  3. Use the real service separately. Open the official app or type the organization’s known website yourself. Do not return through the suspicious message.
  4. Protect anything you exposed. Change an entered password through the real service. Contact a bank or card company through its official route if payment information was entered.
  5. Respond to downloads or device access. If you installed something or allowed remote access, stop the connection and follow official instructions from the device or security provider.

If you entered a password or verification code

Go directly to the real account and change the password. Review recent activity and active sessions if the service provides those controls. If the password was reused elsewhere, change it on those accounts too. Do not approve a sign-in or verification request you did not start.

If you entered financial or identity information

Contact the affected institution through its official app, card, statement, or website. Ask what protective steps may be available. For identity information, follow current federal guidance at IdentityTheft.gov. Do not upload identity documents or account numbers to Scrammer.

If you downloaded something or allowed access

Stop the remote session or connection. Follow the device manufacturer or security provider’s official instructions for updates and security checks. Use a different trusted device when changing important passwords if you think someone may have viewed or controlled the original device.

Official sources