I Clicked a Phishing Link — What Do I Do Now?

First: take a breath. Clicking a bad link happens to careful, experienced people every day — what matters most now is what you do in the next few minutes, not the click itself.

Here's a clear, step-by-step path, whether this happened on a personal device or a work account.

1. Stop interacting with the page or message. Don't enter any more information, and don't download anything else from it.
2. If a file downloaded automatically, don't open it. If you already opened it and something looks wrong, disconnect from Wi-Fi or unplug the network cable.
3. Run the original link through TrustCan's link checker so you have a record of what it actually was.
4. From a different, trusted device, change the password for any account you entered credentials into — and anywhere else you reused that password.
5. Turn on multi-factor authentication on that account if it isn't already enabled.

• Change that password everywhere it was reused, not just on the original account.
• If it was a financial account or card number, call your bank's fraud line immediately — don't wait for a charge to appear.
• If it was a work email or Microsoft 365 account, check for new inbox rules or forwarding addresses you didn't set up, and revoke active sessions.

Treat this as a business incident the moment you learn about it, even if it seems minor. The window between a click and real damage (a wire transfer, a ransomware deployment, a compromised mailbox spreading further) is often measured in hours, not days. Phenicie Business Management offers a free initial incident triage to help you figure out what actually happened and what to do next — use the form below or call (406) 957-1576.

• Don't reply to the original message, even to "confirm" something is wrong.
• Don't wipe or reset a business device before it's been looked at, if there's any chance of a wider compromise — you may need that evidence.
• Don't assume it's fine just because nothing bad has happened yet.