Clicking a phishing link isn’t the end. But you must act quickly.
If You Didn’t Enter Anything
-
Close the tab
-
Run a malware scan
-
Monitor accounts
If You Entered Your Password
-
Change it immediately
-
Change reused passwords
-
Enable MFA
-
Check account activity
For a full breakdown of how phishing works and how to protect yourself end-to-end, read our Email Phishing: Complete Guide to Prevention (2026).
Related guides
- Email Phishing: Complete Guide to Prevention (2026). The pillar covering how to avoid the next one
- How to Check If Your Email Has Been Hacked. Quick check if credentials may have already been used
- How to Secure Your Email Account (Gmail, Outlook). Lock down the account attackers target first
- What Is Multi-Factor Authentication (MFA)?. The second layer that limits damage from a stolen password
- How to Spot Fake Login Pages. Recognize the credential-harvest page before entering anything next time
🛡️ Know your security score?
Take the Free SurfSafe Identity Quiz
20 questions. 2 minutes. Find out exactly how exposed your digital identity is — and get a personalized action plan.