I Clicked a Scam Link — What to Do Right Now

I Clicked a Scam Link — What to Do Right Now

It happens to the best of us. You tapped a link in a text message, clicked through in an email, or followed a URL that turned out to be a scam. Maybe you realized immediately, or maybe you entered some information before the alarm bells went off.

Either way, don't panic. What you do in the next few minutes matters far more than the click itself. This guide covers exactly what to do if you clicked a scam link, whether you simply loaded the page or went further and entered personal information.

Scenario 1: You Clicked the Link But Didn't Enter Any Information

If you only loaded the scam page without typing anything in, your risk is lower — but not zero. Malicious websites can sometimes install malware or tracking scripts simply by loading in your browser.

Immediate Steps

1. Close the browser tab immediately — don't interact with anything on the page
2. Disconnect from the internet temporarily (turn on airplane mode)
3. Clear your browser cache and cookies to remove any tracking
4. Run a malware scan using your device's built-in security (Windows Defender, Apple's XProtect) or a trusted antivirus app
5. Restart your device after the scan completes
6. Update your operating system and browser to the latest version to patch any vulnerabilities

For Mobile Devices

• iPhone: iOS has strong sandboxing, so simply closing Safari and clearing history is usually sufficient. Go to Settings > Safari > Clear History and Website Data.
• Android: Run a scan with Google Play Protect (Settings > Security > Google Play Protect). Clear your Chrome data under Settings > Privacy and Security > Clear Browsing Data.

Scenario 2: You Entered Login Credentials

If you typed a username and password into a fake login page, act immediately.

Immediate Steps

1. Change your password for that account right now — go directly to the real website (type the URL manually, don't use the scam link)
2. Enable two-factor authentication (2FA) if you haven't already
3. Change the password on any other account where you use the same password
4. Check for unauthorized activity — review recent login history, sent emails, or transactions
5. Log out of all sessions — most services have a "Sign out of all devices" option in security settings

Critical: If It Was Your Email Password

Your email is the master key to your digital life. If a scammer has your email password, they can:

• Reset passwords for your bank, social media, and other accounts
• Intercept two-factor authentication codes
• Read sensitive personal information
• Impersonate you to your contacts

Change your email password first, then check your email's "sent" folder and account forwarding rules for anything you didn't set up.

Scenario 3: You Entered Financial Information

If you entered credit card numbers, bank account details, or payment information on a scam site, time is critical.

Immediate Steps

1. Call your bank or credit card company immediately — use the number on the back of your card
2. Report the fraud and request they freeze or cancel the compromised card
3. Monitor your accounts closely for the next 30-90 days
4. Set up transaction alerts so you're notified of any charges
5. Document everything — take screenshots of the scam page if possible and note exactly what information you entered

If You Sent Money via Wire Transfer, Gift Cards, or Crypto

Unfortunately, these payment methods are nearly impossible to reverse. However:

• Wire transfer: Contact your bank immediately — there's a small window where they may be able to recall the wire
• Gift cards: Call the gift card company (Google, Apple, Amazon) and report the fraud with the card numbers
• Cryptocurrency: Report to the exchange you used and file a police report, though recovery is unlikely

Scenario 4: You Entered Personal Identity Information

If you provided your Social Security number, driver's license number, date of birth, or other identity documents:

Immediate Steps

1. Place a fraud alert on your credit reports by contacting one of the three bureaus (Equifax, Experian, or TransUnion — they're required to notify the other two)
2. Consider a credit freeze — this prevents anyone from opening new accounts in your name. Contact all three bureaus individually:
   • Equifax: 1-800-685-1111
   • Experian: 1-888-397-3742
   • TransUnion: 1-888-909-8872
3. Monitor your credit reports weekly at AnnualCreditReport.com (free)
4. File an identity theft report at IdentityTheft.gov
5. Report to your local police for documentation

How to Report the Scam

Reporting helps authorities track and shut down scam operations:

• FTC: reportfraud.ftc.gov
• FBI's IC3: ic3.gov (for internet crimes)
• Your email provider: Use the "Report phishing" feature
• Phone carrier: Forward scam texts to 7726 (SPAM)
• Anti-Phishing Working Group: reportphishing@apwg.org

If You Also Shared Specific Documents

If the scam went past a link click and you actually handed over a specific document or credential, jump to the targeted recovery guide for that item:

• Sent a photo of your driver's license? Follow the driver's-license-compromised checklist — credit freeze, DMV flag, FTC identity theft report.
• Shared a verification code (WhatsApp, Google Voice, banking app)? Read the verification code scam guide — the steps to reclaim the account are time-sensitive.
• Sent money via Zelle, Venmo, or Cash App? See the Zelle and Venmo payment scams guide for what you can (and can't) recover.

How to Prevent Future Scam Clicks

Once you've secured your accounts, take these steps to avoid falling for scam links in the future.

First, lock down your logins so a stolen password can't be used — a password manager also refuses to autofill on a fake domain, which quietly catches a lot of phishing. In 2026 the second factor you choose matters as much as the password. Here's the ladder, strongest first:

Then build the habits that keep you off fake pages in the first place:

1. Slow down before clicking — scammers rely on urgency to override your judgment
2. Verify independently — if a text or email claims there's a problem, go directly to the company's official website or app
3. Keep software updated — security patches protect against known vulnerabilities

Check Suspicious Links Before You Click

The best defense is checking before you click. Cautellus's scanner can analyze suspicious text messages, emails, and links instantly. Paste the message content into our AI-powered tool, and we'll identify phishing patterns, suspicious URLs, and scam tactics before you put yourself at risk.

Already clicked something suspicious? Follow the steps above, then use Cautellus to analyze the original message so you understand exactly what kind of scam it was — and can warn others.