What to Do If You Clicked on a Phishing Link (Step-by-Step Recovery)

Phishing links trick you into visiting fake websites designed to steal your credentials, install malware, or capture personal information. If you've clicked on one — or suspect you have — don't panic. Quick action can minimize the damage.

In this guide, we'll walk through exactly what to do after clicking a phishing link, organized by how much information you may have exposed.

Immediate Actions (Do These First)

1. Disconnect from the Internet

If you suspect malware may have been downloaded, disconnect your device from the internet immediately:

WiFi: Turn off WiFi
Ethernet: Unplug the cable
Mobile: Enable airplane mode

This prevents malware from communicating with remote servers, sending your data, or downloading additional payloads.

2. Don't Enter Any Information

If the phishing page is still open and you haven't entered anything yet, close the tab immediately. Do not:

Enter your username or password
Fill in credit card details
Download any files
Click any additional links

Simply clicking a link is less dangerous than actually submitting information.

3. Screenshot Everything

Before closing anything, take screenshots of:

The phishing page URL
The email or message that contained the link
Any error messages or pop-ups

These will help if you need to report the incident or work with IT support.

If You Only Clicked the Link (No Data Entered)

If you clicked the link but didn't enter any information, the risk is lower but not zero:

Run an Antivirus Scan

Some phishing pages attempt "drive-by downloads" that install malware without your knowledge:

Windows: Run Windows Defender or your antivirus software
Mac: Run Malwarebytes (free) or your security software
Phone: Run your mobile security app

Clear Your Browser Data

Clear cookies and cached data for the phishing site:

1
Go to your browser settings
2
Clear browsing data
3
Focus on cookies and cached files
4
Consider clearing for the last hour or day, not all time

Check for Downloads

Look in your Downloads folder for any files you didn't intentionally download. Delete anything suspicious without opening it.

If You Entered Your Password

This is more serious. Your credentials may be compromised.

Change Your Password Immediately

1
Go directly to the legitimate website (type the URL, don't click any links)
2
Change your password
3
Use a strong, unique password
4
If you use the same password elsewhere, change it on all those sites too

Enable Two-Factor Authentication

If you haven't already, enable 2FA on the compromised account:

Authenticator app (Google Authenticator, Authy) is more secure than SMS
Security keys (YubiKey) are the most secure option

Check for Unauthorized Access

1
Review recent account activity and login history
2
Look for unfamiliar sessions or locations
3
Sign out of all other sessions
4
Check if recovery email or phone number has been changed

Monitor for Suspicious Activity

Watch for signs that your account was accessed:

Unexpected password reset emails
Emails you didn't send in your Sent folder
Changes to account settings
New forwarding rules in email settings

If You Entered Financial Information

If you entered credit card numbers, bank details, or other financial information:

Contact Your Bank

Call your bank or credit card company immediately:

Report the potential fraud
Request a new card/account number
Set up fraud alerts
Review recent transactions for unauthorized charges

Monitor Your Accounts

Check your financial accounts daily for the next month:

Look for small "test" charges (fraudsters often start small)
Set up transaction notifications
Consider a credit freeze if Social Security number was exposed

If You're on a Phone

iPhone

Close Safari and clear history
Check for unfamiliar configuration profiles: Settings → General → VPN & Device Management
Restart your phone
Update iOS to the latest version
If concerned about malware, restore from a backup made before the incident

Android

Close Chrome and clear data
Check for unfamiliar apps: Settings → Apps
Run a security scan: Settings → Security
Check for unknown device admin apps
Restart your phone

Reporting the Phishing Attack

Report to the Impersonated Company

Most major companies have phishing report addresses:

Forward phishing emails to the company's abuse address
Use in-app reporting features

Report to Authorities

US: Forward to reportphishing@apwg.org and report to the FTC
UK: Forward to report@phishing.gov.uk
Your IT department: If it happened on a work device, report immediately

Report to Your Email Provider

Mark the email as phishing in your email client. This helps protect others.

How to Recognize Phishing Links

Prevent future incidents by knowing what to look for. See our comprehensive guide on how to check if a link is safe before clicking.

Common red flags:

Urgency: "Your account will be closed in 24 hours"
Suspicious sender: Email address doesn't match the company
Misspelled URLs: paypa1.com instead of paypal.com
Generic greetings: "Dear customer" instead of your name
Unexpected attachments: Files you didn't request

How URL Shorteners Relate to Phishing

Short links can obscure the true destination, which phishers exploit. Legitimate URL shorteners like Linkly combat this through:

URL scanning — checking destinations against phishing databases
Link previews — letting users see where a link goes before clicking
Abuse reporting — removing malicious links when reported
Domain reputation — maintaining clean domains that aren't associated with spam

When sharing shortened links, use a custom domain so recipients can see your brand and trust the link.

Prevention Checklist

1
Use unique passwords for every account (use a password manager)
2
Enable 2FA everywhere possible
3
Check URLs carefully before entering credentials
4
Don't click links in unexpected emails — go directly to the website
5
Keep software updated — patches fix security vulnerabilities
6
Use link checking tools before clicking suspicious links

Conclusion

Clicking a phishing link is stressful but recoverable if you act quickly. The most important steps are disconnecting, not entering information, changing passwords if compromised, and monitoring your accounts. The faster you respond, the less damage phishers can do.

Want to share safe, trustworthy links? Get started with Linkly and create branded short links on your own domain — so your recipients always know who the link is from.