Symptoms
- Realized after clicking that the email or site looked fake
- A login page appeared that didn't look quite right
- Downloaded a file from the email before realizing it was suspicious
- Entered a password or personal information on the linked page
Likely causes
- CommonConvincing fake email impersonating a real companyPhishing emails copy real branding and create urgency to get you to click without thinking.
- PossibleMalicious file attachmentThe link may have triggered a download of malware disguised as a document or invoice.
- PossibleFake login page harvesting credentialsIf you typed a password into the linked page, it may have gone directly to an attacker.
What to do
- Do not enter any more information on the page; close the browser tab immediately.
- If you entered a password anywhere on that page, change that password right away on the real site, typed in manually rather than via the email link.
- Change the password on any other account that shares the same password.
- Turn on two-factor authentication for the affected account if it isn't already on.
- Run a full antivirus scan in case a file was downloaded or a script ran in the background.
- Check your sent folder and account activity for anything unauthorized.
- Report the phishing email to your email provider and delete it.
When to call a pro
If you entered banking or credit card details on the fake page, contact your bank or card issuer immediately to flag possible fraud.
Safety
Generally low risk
Generally low risk for a careful person. Stop if anything looks different from what this guide describes.