You clicked a phishing link — what to do in the next 10 minutes

Step 1 (0-2 min): disconnect from the network

If you suspect background malware installation (automatic download, executable file launched), unplug your Ethernet cable or disable Wi-Fi. This prevents potential malware from communicating with its command server.

On smartphone: airplane mode. Cuts cellular and Wi-Fi.

Step 2 (2-5 min): change the compromised password

If you entered your password on the fake site, the attacker already has it. Change it immediately on the real site (go directly, not via a link). If you use the same password on other services, change it everywhere too.

Ideally, enable two-factor authentication (2FA) on the affected account. Even with your password, the attacker can't log in without the 2FA code.

Step 3 (5-8 min): monitor your accounts

Check recent transactions on potentially affected accounts:

• Bank: log in, check operations from recent hours. Any unknown operation → immediate stop (number on back of your card).
• Email: check connected devices list (Gmail: Security → Your devices). Sign out everywhere except your own.
• Social media: same, check active sessions.

Step 4 (8-10 min): report

Reporting protects the community:

• Anti-Phishing Working Group: apwg.org — submit the fake site URL, it'll be blocked by browsers.
• FTC (USA): reportfraud.ftc.gov for victim assistance.
• Impersonated bank/brand: forward the email to abuse service (often abuse@brand-name.com) — they'll block for their other customers.
• Police: if you lost money or sensitive data, file a complaint locally.

Step 5 (after): prevent next time

Once the situation is stabilized, take 30 minutes to strengthen your defense:

• Enable 2FA everywhere: email, bank, social media. 2FA neutralizes 90% of successful phishings (attacker has password but not code).
• Use a password manager (1Password, Bitwarden, KeePass): they don't autofill on a fake site whose URL doesn't match — strong alert signal.
• Enable automatic detection with Fiabli on your mailboxes: next time, the suspicious email will be analyzed before you have time to click.

The right reflex

Clicking a phishing email happens to everyone, even security experts. What matters is reaction speed. The 10 minutes following the click make the difference between a no-consequence incident and a fraud that empties your account.

To no longer have to chase every suspicious email, activate Fiabli on your mailbox. Protection is in place in 2 minutes.