Identify what happened
- Simply opening a page is different from entering credentials, approving a prompt, or running a download.
- Write down the sender, link, time, and actions taken.
- Disconnect from the internet if software installed or remote control began.
Protect accounts
- Navigate to the real service independently instead of using the suspicious link.
- Change exposed passwords and any reused versions.
- Review account sessions, recovery methods, forwarding rules, and recent activity.
Check the device and business impact
- Run the built-in security scan and inspect recent downloads.
- Tell the business administrator if work credentials or customer information were involved.
- Contact financial institutions promptly if payment or banking information was entered.
Stop guessing when the problem keeps coming back
Get immediate assistance when software ran, remote access was granted, a code was shared, or sensitive business or financial information was entered.