Think you clicked something? Stay calm — here’s what to do.

1. Stop and don’t enter anything more. Close the page or message you were on.
2. If you entered a password, change it now from a different, trusted device — and anywhere else you used the same one.
3. If you shared card or bank details, call your bank right away and ask them to freeze the card. Use the number on the back of your card, not any number from the message.
4. Turn on two-factor authentication on your important accounts, starting with your email.
5. Watch for a follow-up. Scammers often call pretending to “help” afterwards. Hang up and call back on a number you trust.
6. Report it. Forward phishing emails to your provider, and report the scam to your local authorities.

This is the default guidance. Your bank, insurer or employer may show their own page here with direct contacts.