Clicked a scam link? What to do now

Don’t panic, and don’t type anything else on that page. What to do next depends on what happened. Find yours below and work through it.

Updated 6 October 2026 · 4 min read

Find your situation

What happened after you clicked?

  1. 01

    You only opened the page

    • Close the page. Don’t type anything into it, and don’t download anything it offers.
    • If you didn’t enter any details, it’s likely no harm was done: opening a page alone is rarely enough.
    • Some attacks need only a visit, so keep your phone, computer and browser up to date, and run a scan if you have security software.

  2. 02

    You typed a password

    • Go to the real website or app yourself, not through the link, and change that password now.
    • Change it anywhere else you use the same password, and make each one different.
    • Turn on two-step verification, so a stolen password alone isn’t enough to get in.

  3. 03

    You gave card or bank details

    • Call your bank now on the number on the back of your card. In the UK, you can also dial 159 to reach your bank safely.
    • Tell them what you entered, so they can block the card or watch for payments.
    • Check your statements for payments you don’t recognise, and report any money lost (see Report it, below).

  4. 04

    You installed an app or downloaded a file

    • Don’t open the file. On a computer, run a full scan with your security software and let it remove what it finds.
    • If a scam message tricked you into installing an app on your phone, the UK’s National Cyber Security Centre says: don’t sign in to anything, and factory reset the phone as soon as you can, without backing it up first. A reset erases everything on the phone, including photos and messages that aren’t saved anywhere else.
    • When you set the phone up again, only restore a backup you’re sure was made before you installed the app. If you’re not sure, don’t restore one. Then change the password for anything you signed in to since.

  5. 05

    You gave personal details

    • Expect follow-up scams: calls, texts or emails that use what you gave to sound real.
    • If someone calls saying they’re your bank or the police, hang up and call back on a number you trust. In the UK, dial 159 for your bank.
    • Your bank and the police will never send a courier to collect your card, PIN or cash.
    • In the US, if a scammer has your Social Security, card or bank account number, go to IdentityTheft.gov.

Report it

Tell the people who can stop it

In the UK

Scam text
Forward it to 7726. It’s free.
Scam email
Forward it to report@phishing.gov.uk.
Scam website
Report it to the National Cyber Security Centre.
Lost money
Tell your bank, then report it to Report Fraud at reportfraud.police.uk or on 0300 123 2040 (England, Wales and Northern Ireland). In Scotland, call Police Scotland on 101.

In the US

Scam text
Forward it to 7726 (SPAM).
Scam email
Forward it to reportphishing@apwg.org.
Fraud or lost money
Tell your bank, and report it to the FTC at ReportFraud.ftc.gov.
Identity theft
Go to IdentityTheft.gov.

Watch out for “recovery” offers. Never pay anyone who offers to get your lost money back. Real agencies and organisations never charge for help getting a refund.

Let LinkGuard do it

Check the next link before you click it.

Add to Chrome, it’s freeCheck on your phone

FAQ

Common questions

I clicked a link in a text but didn’t type anything. Am I OK?

Most likely. If you didn’t enter details or install anything, opening a page alone is rarely enough to cause harm. Close it, forward the text to 7726 (UK and US), delete it, and keep your phone up to date.

Should I factory reset my phone?

Usually only if a scam tricked you into installing an app. For a phone with a scam app on it, the UK’s National Cyber Security Centre advises a factory reset (it erases everything on the phone) without backing it up first, and restoring only a backup you’re sure was made before the app went on.

Can I get my money back?

Call your bank as soon as you can: the sooner they know, the more they can do. Be wary of anyone else who offers to recover your money, especially for a fee.

Is it worth reporting?

Yes. In the UK, forwarding scam texts to 7726 and emails to report@phishing.gov.uk takes seconds and helps get scams taken down. If you lost money, report it to Report Fraud (England, Wales and Northern Ireland) or Police Scotland too.

Sources

Where this advice comes from

Guides

More help