Friday, November 13, 2026 Official warnings, in plain English

Cyber Safety Today

Guides · Accounts and passwords

I clicked a scam link or typed in my details. What to do in the next hour

What to do right after you click a link in a scam email or text, in order of what you gave away. Covers a click, a password, card or bank details, a Social Security number, and a payment.

Published November 13, 2026Checked against sources November 13, 2026Written by software from the sources listed

What you do next depends on what you gave away. Find the section below that matches what happened and do those steps now, in order. If more than one section fits, do each one.

The steps come from the consumer advice pages of the Federal Trade Commission (FTC).

The FTC says links and attachments in these messages might install harmful software on your device.1 If you think that happened:

  1. Update the security software on your computer or phone so it has the latest protections. If you do not have any, download it. The FTC suggests getting recommendations from independent review sites, friends and family.12
  2. Run a scan and remove anything it identifies as a problem.1
  3. Report the message, then delete it. Forward a scam email to [email protected]. Forward a scam text to 7726, which spells SPAM.1

If you typed in a password

  1. If you can still log in, create a new, strong password for that account.2
  2. If you use the same password on another account, change it there too.2
  3. Turn on two-factor authentication on the account.2
  4. If you cannot log in, the FTC has a page with links to recovery instructions for some popular accounts: how to get back into a hacked account.2

If you typed in card or bank details

  1. Go to IdentityTheft.gov. The FTC says it shows the specific steps to take based on the information you lost, including a credit card or bank account number.1
  2. Keep checking your account statements. If you spot a charge you did not make, call to report it immediately.3
  3. If someone has already used your card, report it to the card issuer, bank or credit union immediately. Use the number on the back of your card, or log in to your account online or through their app. Ask them to refund your money.2

Federal law protects you from unauthorized use of your credit or debit card.2 Speed matters with a charge you did not make: the FTC says that if you wait, you may have to pay for the charges or lose the money withdrawn from your account.3

If you gave your Social Security number

  1. If the scammer used your number, go to IdentityTheft.gov to report it. You get a recovery plan based on your situation. Follow its steps.2
  2. If the scammer did not use it, or you are not sure, go to IdentityTheft.gov/databreach and follow the steps there to help protect yourself from identity theft.2

If you paid

The FTC says your money might be gone already, but it is always worth asking the company you used to send it if there is a way to get it back.2 Contact them now. What to say depends on how you paid:

  • Zelle or a bank transfer. Report it to your bank or credit union immediately. Ask them to reverse the payment and refund your money.2
  • A payment app like Venmo, Cash App or PayPal. Report it to the payment app immediately. Ask them to reverse the payment and refund your money.2
  • A wire transfer company like Western Union or MoneyGram. Report it to the company immediately. Tell them a scammer tricked you into sending money. Ask for a refund.2
  • A credit or debit card. Report it to the card issuer, bank or credit union immediately, using the number on the back of the card. Ask for a refund.2
  • A gift card. Contact the gift card issuer immediately, using the number on the back of the card. Tell them a scammer tricked you into giving the card number and PIN. Ask for a refund. Keep the gift card and the receipt if you have it.2
  • Cryptocurrency. Contact the cryptocurrency exchange or ATM operator immediately. Tell them it was a fraudulent transaction and ask them to reverse it. The FTC says these payments do not have the same legal protections as credit and debit cards, so it can be hard to get your money back.2
  • Cash sent through the US mail. Contact the US Postal Inspection Service at 1-877-876-2455 immediately. For a fee, they can intercept a domestic package that has not been delivered.2

Report it

Report the scam to the FTC at ReportFraud.ftc.gov. The FTC says it uses reports to build cases against scammers and spot trends.12