I’ve been scammed

I clicked a scam link: what to do now

Clicking a scam link isn’t always a disaster. What matters is what happened next. If you only opened the page, the risk is usually low. If you typed a password, card number, or code, or downloaded something, act now using the steps below.

By Clutterstrike · Last reviewed · 2 min read

Close the page, then match what you did to the steps below.

Do this now

  1. Close the page and don’t go back to it. Don’t enter anything else, and don’t reply to the message.
  2. If you typed a card number, call your card issuer’s fraud line now, using the number on the back of your card. Tell them the card details went to a scam site and ask them to block the card and send a new one.
  3. If you typed a password, change it right away on the real site or app, then on any other account that uses the same password. Turn on two-step verification. Start with your email account, because it can reset everything else.
  4. If you shared a code sent to your phone or email, sign in to that account through the real app now, change the password, and check for changes you didn’t make, like a new email address, phone number, or payee.
  5. If a file downloaded or an app installed, don’t open it. Delete it, update your security software, and run a full scan.
  6. If you entered your Social Security number or driver’s license number, go to IdentityTheft.gov for a recovery plan, and place a free credit freeze (below).

If you only opened the page

If you didn’t type anything, download anything, or allow any prompts, the risk is usually low. Close the tab, delete the message, and keep an eye out for follow-ups. A scammer who sees a click may try again with a more convincing message.

Freeze your credit if personal details were shared

A credit freeze stops anyone, including scammers, from opening new credit in your name. It’s free, it doesn’t affect your credit score, and you can lift it when you need to apply for credit. Place one with each of the three credit bureaus:

Watch your accounts for the next few weeks

Check your bank and card statements for charges you don’t recognize, including small “test” charges. Look at your email account’s settings for forwarding rules you didn’t create. You can see your credit reports free at AnnualCreditReport.com, the official site for free reports.

Report it

Report the scam to the FTC at ReportFraud.ftc.gov. Forward a scam text to 7726 (SPAM), and a phishing email to [email protected]. Reports help agencies spot new scams and warn others.

Got a follow-up message? Check it first

Paste the text, email, or link below. The check runs in your browser, and nothing you paste is uploaded.

Your text
Runs in this page. Nothing is uploaded.

Paste the message or link, then press Check it.

Did anything else happen?

Scams often involve more than one thing. Pick anything else that applies for its steps.

Written by Clutterstrike

Clutterstrike makes Cluttersignal, a browser extension that checks emails, texts, links, and websites for signs of a scam. Our guides are written by the team and checked against official guidance from the agencies listed in the sources.

Last reviewed

Sources

  • The “your account is locked” phishing email

    An email says your account is locked or suspended and you must sign in to restore it. How to spot the fake, and what to do if you entered your password.

  • The fake unpaid toll text scam

    Got a text saying you owe an unpaid toll? It’s probably a scam. How to spot fake E-ZPass, SunPass, and FasTrak texts, and what to do if you tapped the link.