It happens to almost everyone eventually. You receive an urgent email that looks exactly like your bank, Amazon, PayPal, or your electric utility. You click the link, and thirty seconds later that sinking feeling hits your stomach: that wasn’t real.
First: do not panic. What you do in the first five minutes makes all the difference in stopping an attacker from getting access to your accounts or computer.
Step 1: Disconnect from the Internet Immediately
Turn off your WiFi on your laptop or unplug the Ethernet cable immediately. If a malicious script was triggered, severing your internet connection stops malware from communicating with remote command servers or uploading your data.
Step 2: Change Your Passwords From a DIFFERENT Device
If you entered your login credentials on the fake page, immediately grab your smartphone (using cellular data) or another computer and change the password for that account. If you reuse that password on other websites (email, banking, shopping), change those immediately as well.
Step 3: Enable Two-Factor Authentication (2FA)
If you haven’t already enabled Two-Factor Authentication on your primary email and financial accounts, turn it on now. Even if a scammer obtained your password, 2FA prevents them from logging in without the verification code sent to your phone.
Step 4: Run a Full Malware & Rootkit Scan
Before reconnecting to the internet, run a full offline scan using reputable security software to ensure no background keylogger or remote access tool was installed silently.