I Clicked a Link in a Spam Email. What Should I Do?

What if you only clicked the link and closed the page?

1. Close the page. Do not enter anything.
2. Make sure your device and web browser are up to date.
3. Run a scan with your security software.

What if you typed a password?

1. Change that password right away, by going to the real website yourself, not through the email.
2. Change it anywhere else you use the same password.
3. Turn on two-step verification if the website offers it.

What if you gave card or bank details?

1. Call your bank or card company right away, using the number on the back of your card.
2. Ask them to block the card and check for charges you do not recognize.
3. Keep checking your statements for the next few months.

What if you gave your Social Security number?

Go to IdentityTheft.gov, the US government's site for this. It gives you a recovery plan, including how to place a fraud alert or credit freeze.

What if you downloaded or opened something?

1. Disconnect from the internet.
2. Run a full scan with your security software.
3. If you are unsure, ask a trusted computer repair service to check the device.
4. Afterward, change your important passwords from a different device.

What if someone calls you about it?

Scammers sometimes call and pretend to be from your bank or from tech support. Hang up and call the company yourself, using a number you trust. Real companies will not ask you to pay with gift cards.

Where should you report what happened?

• Report the scam to the Federal Trade Commission at ReportFraud.ftc.gov.
• If you lost money, also report it to the FBI at ic3.gov.
• Report the email with Spamtrace to tell the network that sent it. Please do it within 2 days of receiving it.

This article is general guidance, not legal or financial advice.