I clicked a scam link. What now?
Last updated
Stop and close the page
Close the tab or app. Don't reply to the message, call any number in it, or enter more information. If you only opened the link and typed nothing, the risk is lower, but keep going with the checks below.
Disconnect if you downloaded something or gave someone access
If a file downloaded, an app installed, or someone connected to your device remotely, turn off Wi-Fi and unplug from the internet while you clean it up. Then update your security software, run a full scan, and remove anything it flags. Until the device is clean, stop logging in to banking, shopping, and other sensitive accounts on it. FTC: removing malware
Change your passwords
If you typed a password on the page, change it right away. Start with your email and bank, and change it anywhere else you used the same password. Use a different, trusted device if you think yours has malware. Give each account its own strong password. FTC: what to do if you were scammed
Turn on two-factor authentication
Turn on two-factor authentication (also called two-step verification) for your email, bank, credit cards, social media, and payment apps. That way a stolen password alone isn't enough to get in. An authenticator app or security key is safer than text-message codes. Never share a verification code with someone who contacts you. FTC: two-factor authentication
Check your bank and card accounts
If you entered a card or bank number, call the number on the back of your card or log in to your account directly, not through the message. Report the problem and ask about reversing any charges. For the next few weeks, watch your statements for charges you don't recognize.
Freeze your credit (it's free)
If you gave your Social Security number or other personal details, freeze your credit with all three credit bureaus. A freeze stops new accounts from being opened in your name. It costs nothing, doesn't affect your score, and you can lift it any time. FTC: credit freezes and fraud alerts
You can check your credit reports for free at AnnualCreditReport.com. If someone already used your information, IdentityTheft.gov will give you a personal recovery plan.
Report it
Reporting helps investigators spot trends and build cases.
- FTC: ReportFraud.ftc.gov
- FBI Internet Crime Complaint Center: ic3.gov
- Scam text: forward it to SPAM (7726). Phishing email: forward it to [email protected]. FTC: reporting phishing
Watch out for "recovery" offers. After a scam, people who say they can get your money back for a fee are often scammers too. See Fake FBI / IC3 fund recovery scam.
General educational information, not legal or financial advice. Steps are based on the linked FTC guidance; check those pages for the latest details.