I Clicked a Suspicious Link. What Should I Do?
Clicking a suspicious link does not automatically mean you were hacked. What matters is what happened after you clicked it.
What’s happening?
A suspicious link may lead to a fake website, a scam message, a malicious download, or a page designed to trick you into giving away information. Simply opening the link does not prove that your device or account has been compromised.
The most important question is what happened after the page opened. The risk is different if you only viewed the page, entered a password, downloaded a file, installed an app, approved a permission request, or gave someone remote access.
How these scams work
- A text message or email contained a link that was designed to look legitimate
- The link led to a fake sign-in page that copied a real company or bank
- The page tried to make you download software or an unexpected file
- The link was sent by someone whose account may have been compromised
- A scammer used urgency, fear, a prize, or an account warning to make you click quickly
What you should do
- Close the suspicious page. Do not keep clicking buttons, entering information, or following instructions on the page. Close the browser tab or window.
- Do not open an unexpected download. If a file downloaded after you clicked the link, do not open or install it. Leave it alone until you know what it is.
- If you entered a password, change it from a trusted place. Go directly to the real company’s website or use its official app instead of returning to the suspicious link. If you reuse that password elsewhere, change it there too.
- Secure the affected account if you gave away sensitive information. If you entered banking information, a security code, or other sensitive details, contact the organization through a phone number or website you already trust.
- Watch for follow-up scams. After a suspicious click, you may receive a call, text, or email claiming someone can “fix” the problem. Do not give that person remote access or payment information just because they know you clicked something.
Stop here
If you downloaded or installed something, gave remote access, entered banking information, entered a password, or shared a security code, stop experimenting and get help securing the affected device or account.
Do not delete important files, factory-reset the device, disable security software, or follow instructions from an unexpected caller or pop-up just because someone says you have been hacked. Those actions can create additional problems.
Still having trouble?
You don’t have to figure it out alone.
LoTyde Tech Assistance provides friendly, patient technology help for residents throughout Indiana County and surrounding communities.
If you’ve tried the basic checks steps and still need help, we’re here to help.
Get Technology HelpExplore LoTyde services for friendly technology help and basic checks. If a device may have been affected by a suspicious download or remote-access scam, see Device Repair & Cleaning.