Clicked a link in a scam text or email? What to do now
Don't panic. What matters most is what happened after the click. Here is what to do, in order.
5 minute read · Updated October 2026
It happens to careful people every day: a text about a package, an email from "your bank," a quick tap before you thought twice. Don't panic, and don't feel foolish. What matters most is what happened after the click, so start there.
Step 1: Work out what you gave away
- Just clicked, then closed the page? Lower risk. Go to step 6.
- Typed a password? Go to step 2.
- Entered card or bank details? Go to step 3.
- Downloaded something, or gave your Social Security number? Do every step.
Step 2: If you typed a password
Change it right away on the real site. Type the address yourself or use the official app, never the link. If you use that password anywhere else, change it there too. Then turn on two-step verification, so a stolen password alone can't get anyone in.
Start with your email account. Whoever controls your email can reset almost everything else.
Step 3: If you entered card or bank details
Call your bank or card company now, on the number on the back of your card. Tell them what happened and ask them to block the card and watch for fraud. The sooner you call, the more they can do.
Step 4: If you downloaded anything
Update your computer's security software, run a full scan, and remove anything it flags. If someone on the phone talked you into installing a program that lets them see your screen, disconnect from the internet and get help from someone you trust.
Step 5: If you gave your Social Security number
Go to IdentityTheft.gov, the FTC's site, for a step-by-step recovery plan. And freeze your credit at all three bureaus. It's free, and it stops new accounts being opened in your name.
Step 6: Report it
- Scam texts: forward them to 7726 (SPAM)
- Scam emails: forward them to reportphishing@apwg.org
- Then report it to the FTC at ReportFraud.ftc.gov
Then keep an eye out
For the next few months, check your bank and card statements, and watch for password-reset emails you didn't ask for. Be wary of anyone who contacts you offering to recover your money for a fee. That is usually a second scam.
Next time, ask the three questions before you tap: Did I start this? Is it hurrying me? Does it want money, codes or access?
