Clicked on a Phishing Link? Here’s What to Do Immediately

Phishing links are one of the most significant cybersecurity threats to the average person; these links come from malicious actors working to steal sensitive information from their victims. 

If the user acts quickly enough and takes the proper steps, they can minimize the potential harm caused by the initial click. These steps, in conjunction with other common sense cybersecurity defenses, can decide the outcome of a cyberattack. 

What Happens When You Click on a Phishing Link? 

Criminals can use various communication methods to trick their victims, but phishing links most often come from emails, SMS (smishing), and social media. Their premeditated stories vary, from impersonating real people and businesses to promising money or huge sales for “going to the website.” 

Even worse, as the internet brims with malicious content, phishing links are becoming more prevalent. An estimated 3.4 billion spam emails appear globally, containing a significant portion of stand-alone phishing links. 

Further, Millennials and Gen Z users are the most victimized by phishing links. This likely overlaps with internet confidence, as those in older or younger groups tend to be more cautious when clicking threat ads and links.

No matter what generation you come from, if you use the Internet, you’ll want to know what to do after clicking on a phishing link. Afterward, secure your accounts and implement preventions to avoid further information exposure. 

What happens if you click on a phishing link?

Phishing links have a range of outcomes—none great for the victim. In most cases, clicking on a malicious link will reroute the user to a fake login page built to steal the login credentials of those who access it. Fake pages can look like actual pages and even redirect the user back to authentic pages after they’ve collected information. 

Sometimes, clicking on a phishing link unleashes malware, triggering an installation on unprotected devices. These installations can be instant, never giving the user an indication that something has happened. The end goal of these links is always the same: to collect personal and financial information for later misuse.

Immediate Steps to Take After Clicking on a Phishing Link

Got yourself caught in the phishing attack? There’s a way out if you act quickly, and here’s how:

Disconnect from the Internet

Users who think they have clicked on a phishing link should immediately disconnect the internet from their device. Users can reconnect the device to the internet later, but severing that connection before an installation, or a malicious scan can be completed will protect the device and its contents from threat actors. Watch out for automatically triggered downloads when it is time to connect again.

Close the Browser or Application

Users can also stop a malicious process from completing by closing all browser tabs and opening applications.  Closing these windows will stop any remaining processes, hindering any threat actor’s plans. If applicable, check that the programs are fully closed by checking the device’s Task Manager. Also check the device’s recent downloads and interaction histories, as some malware can be an instant download.

Avoid Entering Any Information

Some phishing links redirect the user to a fake credential page rather than triggering an automated download of malicious code. These fake pages trick the user into thinking they are signing in to their typical account; however, this page is usually only meant to collect login information. These types of attacks can create massive issues for their targets and the websites they disguise themselves as, but refusing to put in account credentials and personal details can hinder the threat. 

Run a Malware Scan

These days, antivirus or antimalware software are standard in most devices, from phones to computers. However, these pre-downloaded protections have limitations, one of which tends to be a time-based scan—where the software scans the device at a predetermined time, usually once a week. If a user thinks they’ve interacted with a phishing link, they should utilize a manual scan of their device. If the software finds anything, it will likely have options for scrubbing the scum from the system. 

Secure Your Accounts and Information

Being proactive and preventing yourself from falling prey to attacks is better than trying to get out of it later. Here are some precautions you can regularly take to possibly secure yourself from scammers. 

Change Passwords Immediately

Anyone who believes they may have clicked on a phishing link must consider changing their account passwords. All accounts attached to the potentially exposed information should have their passwords changed; this includes starting with personal and professional emails, as well as financial accounts. For most, the easiest way to change these passwords (and keep track of them) will be through a trusted password manager. 

Enable Two-Factor Authentication (2FA)

Two-factor authentication refers to login processes that require two steps to gain entry. Often, this looks like a one-time code sent to a previously connected cell phone or email account, where the user may submit that token into the website’s system for access. 2FA is now considered one of the bare minimum aspects of cybersecurity, with more sensitive systems requiring multiple steps (MFA) for system access. All personal and meaningful accounts should have 2FA enabled all the time.

Monitor Bank Accounts and Credit Cards

Of course, not all malicious actors are looking for immediate gains. If a user suspects they’ve accidentally handed over financial information or somehow exposed those details to a stranger, they’ll want to begin monitoring their bank accounts and credit cards. They must be vigilant, checking for unauthorized transactions and any suspicious activity. If anything looks strange—they’ll need to speak with their financial provider about protections. 

Check for Unauthorized Account Access

Certain websites have started notifying users of suspicious activity related to their accounts. These notifications are critical to cybersecurity and often contain account activity logs and unauthorized or unusual login times. If an account begins to display access requests from somewhere the user is not, that’s a typical sign of issues. Users should also review their account’s activity regularly to ensure they are the only people able to access the system’s content. Users must notify administrators immediately if suspicious activity appears on the account.

How To Prevent Future Phishing Attacks

Adopt this behavior to create a shelter for your personal information against fraudsters.

Verifying Links Before Clicking

It can be challenging to determine when a link is a potential threat, especially if the in-text link claims to be something it isn’t (i.e., google.com has igeph.com as its hyperlink). One way to tell if the link you’re looking at is genuine is by placing your selector or cursor over the link without clicking it. Depending on the system, the link’s hypertext should appear—maybe at the bottom of the window—and users can determine if the link is real or fake. 

Be Cautious with Attachments and Emails

Attachments and emails are the most common ways phishing links can enter our lives. In particular, emails and attachments from strangers are typically clear signs of malicious activity; however, this doesn’t mean that familiar accounts are safe simply because the user recognizes an account name. Social media accounts, for example, can quickly be taken over by threat actors, which means any interaction may be coming from someone who isn’t who they are

Use Security Tools and Software

A device's basic security just isn’t enough. The basic tools are there for those as a baseline–they are not a complete protection solution. Users shouldn’t rely on the minimal tools they are given to protect themselves; instead, they should implement additional protections whenever possible. Tools like spam filters, antivirus software, VPN usage, browser extensions, and account monitoring services are among the most recommended protections for internet users today. 

Stay Educated About Phishing Scams

Even with the best protections, users may fall victim to a cyberattack. Phishing links, in particular, are a relatively recognizable scam today, but this may not be the case in the future. Assistance from artificial intelligence may allow phishing links to become even more deceptive in the years to come; this is why all users must be informed about the latest phishing techniques and scams. The more you know, the safer you’ll be.  

Signs Your Device or Information May Be Compromised

It’s not always easy to determine if a device is compromised, but there are a few common signs that something has gone awry within a connection: 

• If unusual pop-ups or ads appear when turning on the device or accessing programs, it could be a sign of issues. Some programs use this technology for quick accessibility, but it's best not to use it unless the user needs the program every time they open the device.
• When turning on the device takes considerably longer than previous attempts, signaling a decrease in device performance. 
• If unauthorized changes occur within accounts or services, have a changed status you do not remember making. 
• Some users may even find suspicious emails sent to themselves from their email addresses or connected accounts. 

When users suspect they’ve clicked on a phishing link, they must take immediate steps to help protect themselves. These steps include closing the browser or disconnecting from the internet and running a malware scan as soon as possible. Following these steps, ongoing vigilance will be necessary to protect the user’s data. 

However, if users quickly secure their information and adopt proactive measures, they can avoid and mitigate much of the damage from falling victim to a phishing link scam.