What should I do if I clicked a phishing link?

Answer

Act quickly, but do not panic. Disconnect the affected device from Wi-Fi or Ethernet if you entered credentials, downloaded a file, or noticed unexpected behavior. Use a different trusted device to change the password for the affected account and enable multi-factor authentication. Business users should notify their IT or security contact immediately so logs, sessions, and endpoints can be reviewed.

Recommended steps

1. Disconnect the affected device if compromise is possible.
2. Change the exposed password from a trusted device.
3. Revoke active sessions and enable multi-factor authentication.
4. Run an approved endpoint security scan.
5. Report the message to your IT provider and email administrator.